| Sr. No. | Date and Time | Source | Event ID | Task Category | Description |
|---|
| 1 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18 | 2023-06-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 31 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 32 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 33 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 34 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 35 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 36 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 37 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 38 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 39 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 40 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 41 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 42 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 43 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 44 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 45 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 46 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 47 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 48 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 49 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 50 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 51 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 52 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 53 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 54 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 55 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 56 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 57 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 58 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 59 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 60 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 61 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 62 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 63 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 64 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 65 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 66 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 67 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 68 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 69 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 70 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 71 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 72 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 73 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 74 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 75 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 76 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 77 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 78 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 79 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 80 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 81 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 82 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 83 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 84 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 85 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 86 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 87 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 88 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 89 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 90 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 91 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 92 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 93 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 94 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 95 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 96 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 97 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 98 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 99 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 100 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 101 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 102 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 103 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 104 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 105 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 106 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 107 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 108 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 109 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 110 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 111 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 112 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 113 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 114 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 115 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 116 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 117 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 118 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 119 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 120 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 121 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 122 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 123 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 124 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 125 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 126 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 127 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 128 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 129 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 130 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 131 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 132 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 133 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 134 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 135 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 136 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 137 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 138 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 139 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 140 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 141 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 142 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 143 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 144 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 145 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 146 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 147 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 148 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 149 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 150 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 151 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 152 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 153 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 154 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 155 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 156 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 157 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 158 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 159 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 160 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 161 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 162 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 163 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 164 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 165 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 166 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 167 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 168 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 169 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 170 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 171 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 172 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 173 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 174 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 175 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 176 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 177 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 178 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 179 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 180 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 181 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 182 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 183 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 184 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 185 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 186 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 187 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 188 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 189 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 190 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 191 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 192 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 193 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 194 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 195 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 196 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 197 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 198 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 199 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 200 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 201 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 202 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 203 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 204 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 205 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 206 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 207 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 208 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 209 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 210 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 211 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 212 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 213 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 214 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 215 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 216 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 217 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 218 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 219 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 220 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 221 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 222 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 223 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 224 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 225 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 226 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 227 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 228 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 229 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 230 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 231 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 232 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 233 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 234 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 235 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 236 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 237 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 238 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 239 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 240 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 241 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 242 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 243 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 244 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 245 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 246 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 247 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 248 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 249 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 250 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 251 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 252 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 253 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 254 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 255 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 256 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 257 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 258 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 259 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 260 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 261 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 262 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 263 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 264 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 265 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 266 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 267 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 268 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 269 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 270 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 271 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 272 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 273 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 274 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 275 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 276 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 277 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 278 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 279 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 280 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 281 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 282 | 2023-06-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 283 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 284 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 285 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 286 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 287 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 288 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 289 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 290 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 291 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 292 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 293 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 294 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 295 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 296 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 297 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 298 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 299 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 300 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 301 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 302 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 303 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 304 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 305 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 306 | 2023-06-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 307 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 308 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 309 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 310 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 311 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 312 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 313 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 314 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 315 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 316 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 317 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 318 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 319 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 320 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 321 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 322 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 323 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 324 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 325 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 326 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 327 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 328 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 329 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 330 | 2023-06-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 331 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 332 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 333 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 334 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 335 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 336 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 337 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 338 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 339 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 340 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 341 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 342 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 343 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 344 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 345 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 346 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 347 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 348 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 349 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 350 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 351 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 352 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 353 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 354 | 2023-06-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 355 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 356 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 357 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 358 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 359 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 360 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 361 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 362 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 363 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 364 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 365 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 366 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 367 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 368 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 369 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 370 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 371 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 372 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 373 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 374 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 375 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 376 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 377 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 378 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 379 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 380 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 381 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 382 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 383 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 384 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 385 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 386 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 387 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 388 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 389 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 390 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 391 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 392 | 2023-06-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 393 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 394 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 395 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 396 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 397 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 398 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 399 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 400 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 401 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 402 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 403 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 404 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 405 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 406 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 407 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 408 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 409 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 410 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 411 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 412 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 413 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 414 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 415 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 416 | 2023-06-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 417 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 418 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 419 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 420 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 421 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 422 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 423 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 424 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 425 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 426 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 427 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 428 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 429 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 430 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 431 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 432 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 433 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 434 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 435 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 436 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 437 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 438 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 439 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 440 | 2023-06-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 441 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 442 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 443 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 444 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 445 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 446 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 447 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 448 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 449 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 450 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 451 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 452 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 453 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 454 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 455 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 456 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 457 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 458 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 459 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 460 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 461 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 462 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 463 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 464 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 465 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 466 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 467 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 468 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 469 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 470 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 471 | 2023-06-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 472 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 473 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 474 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 475 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 476 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 477 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 478 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 479 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 480 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 481 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 482 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 483 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 484 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 485 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 486 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 487 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 488 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 489 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 490 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 491 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 492 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 493 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 494 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 495 | 2023-06-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 496 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 497 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 498 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 499 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 500 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 501 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 502 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 503 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 504 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 505 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 506 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 507 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 508 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 509 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 510 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 511 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 512 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 513 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 514 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 515 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 516 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 517 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 518 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 519 | 2023-06-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 520 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 521 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 522 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 523 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 524 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 525 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 526 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 527 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 528 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 529 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 530 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 531 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 532 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 533 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 534 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 535 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 536 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 537 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 538 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 539 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 540 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 541 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 542 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 543 | 2023-05-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 544 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 545 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 546 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 547 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 548 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 549 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 550 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 551 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 552 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 553 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 554 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 555 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 556 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 557 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 558 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 559 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 560 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 561 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 562 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 563 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 564 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 565 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 566 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 567 | 2023-05-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 568 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 569 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 570 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 571 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 572 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 573 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 574 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 575 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 576 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 577 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 578 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 579 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 580 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 581 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 582 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 583 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 584 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 585 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 586 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 587 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 588 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 589 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 590 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 591 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 592 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 593 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 594 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 595 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 596 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 597 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 598 | 2023-05-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 599 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 600 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 601 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 602 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 603 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 604 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 605 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 606 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 607 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 608 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 609 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 610 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 611 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 612 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 613 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 614 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 615 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 616 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 617 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 618 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 619 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 620 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 621 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 622 | 2023-05-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 623 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 624 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 625 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 626 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 627 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 628 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 629 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 630 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 631 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 4799 | Security Group Management | A security-enabled local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Group:| Security ID: BUILTIN\Administrators| Group Name: Administrators| Group Domain: Builtin||Process Information:| Process ID: 0x37fc| Process Name: C:\Windows\System32\svchost.exe |
| 632 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 633 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 634 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 635 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 636 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 637 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 638 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 639 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 640 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 641 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 642 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 643 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 644 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 645 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 646 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 647 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 648 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 649 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 650 | 2023-05-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 651 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 652 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 653 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 654 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 655 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 656 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 657 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 658 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 659 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 660 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 661 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 662 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 663 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 664 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 665 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 666 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 667 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 668 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 669 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 670 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 671 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 672 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 673 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 674 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 675 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 676 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 677 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 678 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 679 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 680 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 681 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 682 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 683 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 684 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 685 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 686 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 687 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 688 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 689 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 690 | 2023-05-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 691 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 692 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 693 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 694 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 695 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 696 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 697 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 698 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 699 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 700 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 701 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 702 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 703 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 704 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 705 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 706 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 707 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 708 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 709 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 710 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 711 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 712 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 713 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 714 | 2023-05-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 715 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 716 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 717 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 718 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 719 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 720 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 721 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 722 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 723 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 724 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 725 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 726 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 727 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 728 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 729 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 730 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 731 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 732 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 733 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 734 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 735 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 736 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 737 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 738 | 2023-05-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 739 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 740 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 741 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 742 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 743 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 744 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 745 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 746 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 747 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 748 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 749 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 750 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 751 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 752 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 753 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 754 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 755 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 756 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 757 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 758 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 759 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 760 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 761 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 762 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 763 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 764 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 765 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 766 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 767 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 768 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 769 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 770 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 771 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 772 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 773 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 774 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 775 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 776 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 777 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 778 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 779 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 780 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 781 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 782 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 783 | 2023-05-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 784 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 785 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 786 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 787 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 788 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 789 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 790 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 791 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 792 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 793 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 794 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 795 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 796 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 797 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 798 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 799 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 800 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 801 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 802 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 803 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 804 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 805 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 806 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 807 | 2023-05-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 808 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 809 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 810 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 811 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 812 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 813 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 814 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 815 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 816 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 817 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 818 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 819 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 820 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 821 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 822 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 823 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 824 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 825 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 826 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4799 | Security Group Management | A security-enabled local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Group:| Security ID: BUILTIN\Administrators| Group Name: Administrators| Group Domain: Builtin||Process Information:| Process ID: 0x5170| Process Name: C:\Windows\System32\svchost.exe |
| 827 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 828 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 829 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 830 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 831 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 832 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 833 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 834 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 835 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 836 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x4a30| Process Name: C:\Windows\System32\taskhostw.exe |
| 837 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x4a30| Process Name: C:\Windows\System32\taskhostw.exe |
| 838 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x4a30| Process Name: C:\Windows\System32\taskhostw.exe |
| 839 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x4a30| Process Name: C:\Windows\System32\taskhostw.exe |
| 840 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 841 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 842 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 843 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 844 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 845 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 846 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 847 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 848 | 2023-05-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 849 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 850 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 851 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 852 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 853 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 854 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 855 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 856 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 857 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 858 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 859 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 860 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 861 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 862 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 863 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 864 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 865 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 866 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 867 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 868 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 869 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 870 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 871 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 872 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 873 | 2023-05-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 874 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 875 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 876 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 877 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 878 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 879 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 880 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 881 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 882 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 883 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 884 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 885 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6F68972||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 886 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6F6A258||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 887 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6F689C5||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 888 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6F6A373||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 889 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6F6A258||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 890 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6F6A373| Linked Logon ID: 0x6F6A258| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 891 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6F6A258| Linked Logon ID: 0x6F6A373| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 892 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 893 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 894 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 895 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 896 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6F68972||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 897 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6F689C5| Linked Logon ID: 0x6F68972| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 898 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6F68972| Linked Logon ID: 0x6F689C5| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 899 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 900 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 901 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 902 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 903 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 904 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 905 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 906 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 907 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 908 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 909 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 910 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 911 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 912 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 913 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 914 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 915 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 916 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 917 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 918 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 919 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 920 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 921 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 922 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 923 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 924 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 925 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 926 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 927 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 928 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 929 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 930 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 931 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 932 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 933 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 934 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 935 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 936 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 937 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 938 | 2023-05-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 939 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 940 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 941 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 942 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 943 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 944 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 945 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 946 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 947 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 948 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 949 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 950 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 951 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 952 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 953 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 954 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 955 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 956 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 957 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 958 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 959 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 960 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 961 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 962 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 963 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 964 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 965 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 966 | 2023-05-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 967 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 968 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 969 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x7194| Process Name: C:\Windows\System32\LogonUI.exe |
| 970 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 971 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 972 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 973 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 974 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 975 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 976 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 977 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 978 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 979 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 980 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 981 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 982 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 983 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 984 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 985 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 986 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 987 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 988 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 989 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 990 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 991 | 2023-05-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 992 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 993 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 994 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 995 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 996 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 997 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 998 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 999 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1000 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1001 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1002 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1003 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1004 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1005 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1006 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1007 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1008 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1009 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1010 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1011 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1012 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1013 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1014 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1015 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1016 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1017 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1018 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1019 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1020 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1021 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1022 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1023 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1024 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1025 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1026 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1027 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1028 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1029 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1030 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1031 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1032 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1033 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1034 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1035 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1036 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1037 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1038 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1039 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1040 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1041 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1042 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1043 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1044 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1045 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1046 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1047 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1048 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1049 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1050 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1051 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1052 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1053 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1054 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1055 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1056 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1057 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1058 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1059 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1060 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1061 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1062 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1063 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1064 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1065 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1066 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1067 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1068 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1069 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1070 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1071 | 2023-05-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1072 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1073 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1074 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1075 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1076 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1077 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1078 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1079 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1080 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1081 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1082 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1083 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1084 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1085 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1086 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1087 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1088 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1089 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1090 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1091 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1092 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1093 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1094 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1095 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1096 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1097 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1098 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1099 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1100 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1101 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1102 | 2023-05-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1103 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1104 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1105 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1106 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1107 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1108 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1109 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1110 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1111 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1112 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1113 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1114 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1115 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1116 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1117 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1118 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1119 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1120 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1121 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1122 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1123 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1124 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1125 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1126 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1127 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1128 | 2023-05-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1129 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1130 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1131 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1132 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1133 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1134 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1135 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1136 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1137 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1138 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1139 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1140 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1141 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1142 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1143 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1144 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1145 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1146 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1147 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1148 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1149 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1150 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1151 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1152 | 2023-05-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1153 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1154 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1155 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1156 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1157 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1158 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1159 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1160 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1161 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1162 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1163 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1164 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1165 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1166 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1167 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1168 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1169 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1170 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1171 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1172 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1173 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1174 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1175 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1176 | 2023-05-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1177 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1178 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1179 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1180 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1181 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1182 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1183 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1184 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1185 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1186 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1187 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1188 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1189 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1190 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1191 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1192 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1193 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1194 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1195 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1196 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1197 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1198 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1199 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1200 | 2023-05-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1201 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1202 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1203 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1204 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1205 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1206 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1207 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1208 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1209 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1210 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1211 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1212 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1213 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1214 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1215 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1216 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1217 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1218 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1219 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1220 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1221 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1222 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1223 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1224 | 2023-05-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1225 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1226 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1227 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1228 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1229 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1230 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1231 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1232 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1233 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1234 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1235 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1236 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1237 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1238 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1239 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1240 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1241 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1242 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1243 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1244 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1245 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1246 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1247 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1248 | 2023-05-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1249 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1250 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1251 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1252 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1253 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1254 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1255 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1256 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1257 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1258 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1259 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1260 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1261 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1262 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1263 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1264 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1265 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1266 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1267 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1268 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1269 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1270 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1271 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1272 | 2023-05-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1273 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1274 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1275 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1276 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1277 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1278 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1279 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1280 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1281 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1282 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1283 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1284 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1285 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1286 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1287 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1288 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1289 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1290 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1291 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1292 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1293 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1294 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1295 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1296 | 2023-05-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1297 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1298 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1299 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1300 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1301 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1302 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1303 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1304 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1305 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1306 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1307 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1308 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1309 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1310 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1311 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1312 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1313 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1314 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1315 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1316 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1317 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1318 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1319 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1320 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1321 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1322 | 2023-05-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1323 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1324 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1325 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1326 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1327 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1328 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1329 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1330 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1331 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1332 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1333 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1334 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1335 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1336 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1337 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1338 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1339 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1340 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1341 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1342 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1343 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1344 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1345 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1346 | 2023-05-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1347 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1348 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1349 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1350 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1351 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1352 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1353 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1354 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1355 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1356 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1357 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1358 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1359 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1360 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1361 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1362 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1363 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1364 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1365 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1366 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1367 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1368 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1369 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1370 | 2023-05-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1371 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1372 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1373 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1374 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1375 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1376 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1377 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1378 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1379 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1380 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1381 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1382 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1383 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1384 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1385 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1386 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1387 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1388 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1389 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1390 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1391 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1392 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1393 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1394 | 2023-05-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1395 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1396 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1397 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1398 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1399 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1400 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1401 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1402 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1403 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1404 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1405 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1406 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1407 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1408 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1409 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1410 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1411 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1412 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1413 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1414 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1415 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1416 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1417 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1418 | 2023-05-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1419 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1420 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1421 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1422 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1423 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1424 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1425 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1426 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1427 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1428 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1429 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1430 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1431 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1432 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1433 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1434 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1435 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1436 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1437 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1438 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1439 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1440 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1441 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1442 | 2023-05-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1443 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1444 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1445 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1446 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1447 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1448 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1449 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1450 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1451 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1452 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1453 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1454 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1455 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1456 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1457 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1458 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1459 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1460 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1461 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1462 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1463 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1464 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1465 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1466 | 2023-05-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1467 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1468 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1469 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1470 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1471 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1472 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1473 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1474 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1475 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1476 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1477 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1478 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1479 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1480 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1481 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1482 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1483 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1484 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1485 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1486 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1487 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1488 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1489 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1490 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1491 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1492 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1493 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1494 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1495 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1496 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1497 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1498 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1499 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1500 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1501 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1502 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1503 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1504 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1505 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1506 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1507 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1508 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1509 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1510 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1511 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1512 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1513 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1514 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1515 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1516 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1517 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1518 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1519 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1520 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1521 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1522 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1523 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1524 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1525 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1526 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1527 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1528 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1529 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1530 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1531 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1532 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1533 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1534 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1535 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1536 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1537 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1538 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1539 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1540 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1541 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1542 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1543 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1544 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1545 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1546 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1547 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1548 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1549 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1550 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1551 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1552 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1553 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1554 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1555 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1556 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1557 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1558 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1559 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1560 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1561 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1562 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1563 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1564 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1565 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1566 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1567 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1568 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1569 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1570 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1571 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1572 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1573 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1574 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1575 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1576 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1577 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1578 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1579 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1580 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1581 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1582 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1583 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1584 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1585 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1586 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1587 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1588 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1589 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1590 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1591 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1592 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1593 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1594 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1595 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1596 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1597 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1598 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1599 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1600 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1601 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1602 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1603 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1604 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1605 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1606 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1607 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1608 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1609 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1610 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1611 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1612 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1613 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1614 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4799 | Security Group Management | A security-enabled local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Group:| Security ID: BUILTIN\Administrators| Group Name: Administrators| Group Domain: Builtin||Process Information:| Process ID: 0x7314| Process Name: C:\Windows\System32\svchost.exe |
| 1615 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1616 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1617 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1618 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1619 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1620 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1621 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1622 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1623 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1624 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1625 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1626 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1627 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1628 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1629 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1630 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1631 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1632 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1633 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1634 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1635 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1636 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1637 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1638 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1639 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1640 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1641 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1642 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1643 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1644 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1645 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1646 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1647 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1648 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1649 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1650 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1651 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1652 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1653 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1654 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1655 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1656 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1657 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1658 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1659 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1660 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1661 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1662 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1663 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1664 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1665 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1666 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1667 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1668 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1669 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1670 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1671 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1672 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1673 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1674 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1675 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1676 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1677 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1678 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1679 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1680 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1681 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1682 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1683 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1684 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1685 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1686 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1687 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1688 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1689 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1690 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1691 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1692 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1693 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1694 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1695 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1696 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1697 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1698 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1699 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1700 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1701 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1702 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1703 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1704 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1705 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1706 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1707 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1708 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1709 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1710 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1711 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1712 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1713 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1714 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1715 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1716 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1717 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1718 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1719 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1720 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1721 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1722 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1723 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1724 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1725 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1726 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1727 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1728 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1729 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1730 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1731 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1732 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1733 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1734 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1735 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1736 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1737 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1738 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1739 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1740 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1741 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1742 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1743 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1744 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1745 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1746 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1747 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1748 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1749 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1750 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1751 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1752 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1753 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1754 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1755 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1756 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1757 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1758 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1759 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1760 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1761 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1762 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1763 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1764 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1765 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1766 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1767 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1768 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1769 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1770 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1771 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1772 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1773 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1774 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1775 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1776 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1777 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1778 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1779 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1780 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1781 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1782 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1783 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1784 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1785 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1786 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1787 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1788 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1789 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1790 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1791 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1792 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1793 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1794 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1795 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1796 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1797 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1798 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1799 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1800 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1801 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1802 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1803 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1804 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1805 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1806 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1807 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1808 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1809 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1810 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1811 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1812 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1813 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1814 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1815 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1816 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1817 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1818 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1819 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1820 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1821 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1822 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1823 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1824 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1825 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1826 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1827 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1828 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1829 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1830 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1831 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1832 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1833 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1834 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1835 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1836 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1837 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1838 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1839 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1840 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1841 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1842 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1843 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1844 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1845 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1846 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1847 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1848 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1849 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1850 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1851 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1852 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1853 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1854 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1855 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1856 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1857 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1858 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1859 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1860 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1861 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1862 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1863 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1864 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1865 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1866 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1867 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1868 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1869 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1870 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1871 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1872 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1873 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1874 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1875 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1876 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1877 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1878 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1879 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1880 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1881 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1882 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1883 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1884 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6D2E2CC||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 1885 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6D2F04B||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 1886 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6D2E357||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 1887 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6D2F13C||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 1888 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6D2F04B||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1889 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6D2F13C| Linked Logon ID: 0x6D2F04B| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1890 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6D2F04B| Linked Logon ID: 0x6D2F13C| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1891 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 1892 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 1893 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 1894 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 1895 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6D2E2CC||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1896 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6D2E357| Linked Logon ID: 0x6D2E2CC| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1897 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6D2E2CC| Linked Logon ID: 0x6D2E357| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1898 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 1899 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 1900 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 1901 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 1902 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1903 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1904 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1905 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1906 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1907 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1908 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1909 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1910 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1911 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1912 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1913 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1914 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1915 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1916 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1917 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1918 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1919 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1920 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1921 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1922 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1923 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1924 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1925 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1926 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1927 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1928 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1929 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1930 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1931 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1932 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1933 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1934 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1935 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1936 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1937 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1938 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1939 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1940 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1941 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1942 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1943 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1944 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1945 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1946 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1947 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1948 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1949 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1950 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1951 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1952 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1953 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1954 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1955 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1956 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1957 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1958 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1959 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1960 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1961 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1962 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1963 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1964 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1965 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1966 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1967 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1968 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1969 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1970 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 1971 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1972 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1973 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1974 | 2023-05-10 23:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1975 | 2023-05-10 23:23:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1976 | 2023-05-10 23:23:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1977 | 2023-05-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1978 | 2023-05-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1979 | 2023-05-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1980 | 2023-05-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1981 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1982 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1983 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1984 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1985 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1986 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1987 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1988 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1989 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x2468| Process Name: C:\Windows\System32\LogonUI.exe |
| 1990 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1991 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1992 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1993 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1994 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 1995 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 1996 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1997 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 1998 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 1999 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2000 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2001 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2002 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2003 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2004 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2005 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2006 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2007 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2008 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2009 | 2023-05-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2010 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2011 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2012 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2013 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2014 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2015 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2016 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2017 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2018 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2019 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2020 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2021 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2022 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2023 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2024 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2025 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2026 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2027 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2028 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2029 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2030 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2031 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2032 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2033 | 2023-05-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2034 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2035 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2036 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2037 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2038 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2039 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2040 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2041 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2042 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2043 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2044 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2045 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2046 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2047 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2048 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2049 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2050 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2051 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2052 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2053 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2054 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2055 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2056 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2057 | 2023-05-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2058 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2059 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2060 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2061 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2062 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2063 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2064 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2065 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2066 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2067 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2068 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2069 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2070 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2071 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2072 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2073 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2074 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2075 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2076 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2077 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2078 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2079 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2080 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2081 | 2023-05-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2082 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2083 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2084 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2085 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2086 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2087 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2088 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2089 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2090 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2091 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2092 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2093 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2094 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2095 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2096 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2097 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2098 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2099 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2100 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2101 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2102 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2103 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2104 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2105 | 2023-05-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2106 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2107 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2108 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2109 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2110 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2111 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2112 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2113 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2114 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2115 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2116 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2117 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2118 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2119 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2120 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2121 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2122 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2123 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2124 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2125 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2126 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2127 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2128 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2129 | 2023-05-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2130 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2131 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2132 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2133 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2134 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2135 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2136 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2137 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2138 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2139 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2140 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2141 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2142 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2143 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2144 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2145 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2146 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2147 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2148 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2149 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2150 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2151 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2152 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2153 | 2023-05-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2154 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2155 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2156 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2157 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2158 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2159 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2160 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2161 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2162 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2163 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2164 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2165 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2166 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2167 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2168 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2169 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2170 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2171 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2172 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2173 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2174 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2175 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2176 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2177 | 2023-05-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2178 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2179 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2180 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2181 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2182 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2183 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2184 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2185 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2186 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2187 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2188 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2189 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2190 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2191 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2192 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2193 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2194 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2195 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2196 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2197 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2198 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2199 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2200 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2201 | 2023-05-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2202 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2203 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2204 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2205 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2206 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2207 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2208 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2209 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2210 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2211 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2212 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2213 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2214 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2215 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2216 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2217 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2218 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2219 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2220 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2221 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2222 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2223 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2224 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2225 | 2023-05-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2226 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2227 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2228 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2229 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2230 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2231 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2232 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2233 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2234 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2235 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2236 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2237 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2238 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2239 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2240 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2241 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2242 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2243 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2244 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2245 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2246 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2247 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2248 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2249 | 2023-05-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2250 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2251 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2252 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2253 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2254 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2255 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2256 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2257 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2258 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2259 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2260 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2261 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2262 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2263 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2264 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2265 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2266 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2267 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2268 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2269 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2270 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 2271 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 2272 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2273 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2274 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2275 | 2023-05-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2276 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2277 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2278 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2279 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2280 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2281 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2282 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2283 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2284 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2285 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2286 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2287 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2288 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2289 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2290 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2291 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2292 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2293 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2294 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2295 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2296 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2297 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2298 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2299 | 2023-05-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2300 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2301 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2302 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2303 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2304 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2305 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2306 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2307 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2308 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2309 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2310 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2311 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2312 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2313 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2314 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2315 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2316 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2317 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2318 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2319 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2320 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2321 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2322 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2323 | 2023-05-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2324 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2325 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2326 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2327 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2328 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2329 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2330 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2331 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2332 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2333 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2334 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2335 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2336 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2337 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2338 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2339 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2340 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2341 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2342 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2343 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2344 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2345 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2346 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2347 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2348 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2349 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2350 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2351 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2352 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2353 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2354 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2355 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2356 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2357 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2358 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2359 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2360 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2361 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2362 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2363 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2364 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2365 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2366 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2367 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2368 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2369 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2370 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2371 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2372 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2373 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2374 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2375 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2376 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2377 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2378 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2379 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2380 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2381 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 2382 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 2383 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2384 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2385 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2386 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2387 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2388 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2389 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2390 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2391 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2392 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2393 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2394 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2395 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2396 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2397 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2398 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2399 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2400 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2401 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2402 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2403 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2404 | 2023-05-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2405 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2406 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2407 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2408 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2409 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2410 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2411 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2412 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2413 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2414 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2415 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2416 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2417 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2418 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2419 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2420 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2421 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2422 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2423 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2424 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2425 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2426 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2427 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2428 | 2023-05-10 23:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2429 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2430 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2431 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2432 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2433 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2434 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2435 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2436 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2437 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2438 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2439 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2440 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2441 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2442 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2443 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2444 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2445 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2446 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2447 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2448 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2449 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2450 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2451 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2452 | 2023-05-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2453 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2454 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2455 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2456 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2457 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2458 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2459 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2460 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2461 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2462 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2463 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2464 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2465 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2466 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2467 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2468 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2469 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2470 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2471 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2472 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2473 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2474 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2475 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2476 | 2023-05-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2477 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2478 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2479 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2480 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2481 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2482 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2483 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2484 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2485 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2486 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2487 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2488 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2489 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2490 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2491 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2492 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2493 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2494 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2495 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2496 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2497 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2498 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2499 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2500 | 2023-05-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2501 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2502 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2503 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2504 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2505 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2506 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2507 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2508 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2509 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2510 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2511 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2512 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2513 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2514 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2515 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2516 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2517 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2518 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2519 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2520 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2521 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2522 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2523 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2524 | 2023-05-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2525 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2526 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2527 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2528 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2529 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2530 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2531 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2532 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2533 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2534 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2535 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2536 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2537 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2538 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2539 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2540 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2541 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2542 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2543 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2544 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2545 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2546 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2547 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2548 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2549 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2550 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2551 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2552 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2553 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2554 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2555 | 2023-05-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2556 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2557 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2558 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2559 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2560 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2561 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2562 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2563 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2564 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2565 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2566 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2567 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2568 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2569 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2570 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2571 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2572 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2573 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2574 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2575 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2576 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2577 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2578 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2579 | 2023-05-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2580 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2581 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2582 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2583 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2584 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2585 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2586 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2587 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2588 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2589 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2590 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2591 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2592 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2593 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2594 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2595 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2596 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2597 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2598 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2599 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2600 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2601 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2602 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2603 | 2023-05-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2604 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2605 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2606 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2607 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2608 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2609 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2610 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2611 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2612 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2613 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2614 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2615 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2616 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2617 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2618 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2619 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2620 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2621 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2622 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2623 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2624 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2625 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2626 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2627 | 2023-05-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2628 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2629 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2630 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2631 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2632 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2633 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2634 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2635 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2636 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2637 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2638 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2639 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2640 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2641 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2642 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2643 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2644 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2645 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2646 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2647 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2648 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2649 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2650 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2651 | 2023-05-10 22:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2652 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2653 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2654 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2655 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2656 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2657 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2658 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2659 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2660 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2661 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2662 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2663 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2664 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2665 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2666 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2667 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2668 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2669 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2670 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2671 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2672 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2673 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2674 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2675 | 2023-05-10 22:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2676 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2677 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2678 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2679 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2680 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2681 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2682 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2683 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2684 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2685 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2686 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2687 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2688 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2689 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2690 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2691 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2692 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2693 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2694 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2695 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2696 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2697 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2698 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2699 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2700 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2701 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2702 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2703 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2704 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2705 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2706 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2707 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2708 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2709 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2710 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2711 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2712 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2713 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2714 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2715 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2716 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2717 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2718 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2719 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2720 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2721 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2722 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2723 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2724 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2725 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2726 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2727 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2728 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2729 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2730 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2731 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2732 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2733 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2734 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2735 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2736 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2737 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2738 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2739 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2740 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2741 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2742 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2743 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2744 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2745 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2746 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2747 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2748 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2749 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2750 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2751 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2752 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2753 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2754 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2755 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2756 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2757 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2758 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2759 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2760 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2761 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2762 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2763 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2764 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2765 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2766 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2767 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2768 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2769 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2770 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2771 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2772 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2773 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2774 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2775 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2776 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2777 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2778 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2779 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2780 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2781 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2782 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2783 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2784 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2785 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2786 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2787 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2788 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2789 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2790 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2791 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2792 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2793 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2794 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2795 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2796 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2797 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2798 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2799 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2800 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2801 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2802 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2803 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2804 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2805 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2806 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2807 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2808 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2809 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2810 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2811 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2812 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2813 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2814 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2815 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2816 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2817 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2818 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2819 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2820 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2821 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2822 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2823 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2824 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2825 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2826 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2827 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2828 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2829 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2830 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2831 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2832 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2833 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2834 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2835 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2836 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2837 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2838 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2839 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2840 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2841 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2842 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2843 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2844 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2845 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2846 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2847 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2848 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2849 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2850 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2851 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2852 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2853 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2854 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2855 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2856 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2857 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2858 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2859 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2860 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2861 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2862 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2863 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2864 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2865 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2866 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2867 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2868 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2869 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2870 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2871 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2872 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2873 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2874 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2875 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2876 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2877 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2878 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2879 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2880 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2881 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2882 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2883 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2884 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2885 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2886 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2887 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2888 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2889 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2890 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2891 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2892 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2893 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2894 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2895 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2896 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2897 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2898 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2899 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2900 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2901 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2902 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2903 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2904 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2905 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2906 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2907 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2908 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2909 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2910 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2911 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2912 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2913 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2914 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2915 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2916 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2917 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2918 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2919 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2920 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2921 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2922 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2923 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2924 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2925 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2926 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2927 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2928 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2929 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2930 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2931 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2932 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2933 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2934 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2935 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2936 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2937 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2938 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2939 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2940 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2941 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2942 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2943 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2944 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2945 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2946 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2947 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2948 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2949 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2950 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2951 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2952 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2953 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2954 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 2955 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 2956 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2957 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2958 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2959 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2960 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2961 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2962 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2963 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2964 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2965 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2966 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2967 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2968 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2969 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2970 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2971 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2972 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2973 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2974 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2975 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2976 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2977 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2978 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2979 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2980 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2981 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2982 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2983 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2984 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2985 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2986 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2987 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2988 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2989 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2990 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2991 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2992 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2993 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2994 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2995 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2996 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2997 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2998 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 2999 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3000 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3001 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3002 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3003 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3004 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3005 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3006 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3007 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3008 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3009 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3010 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3011 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3012 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3013 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3014 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3015 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3016 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3017 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3018 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3019 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3020 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3021 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3022 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3023 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3024 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3025 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3026 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3027 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3028 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3029 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3030 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3031 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3032 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3033 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3034 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3035 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3036 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3037 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3038 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3039 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3040 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3041 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3042 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3043 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3044 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3045 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3046 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3047 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3048 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3049 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3050 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3051 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3052 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3053 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3054 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3055 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3056 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3057 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3058 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3059 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3060 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3061 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3062 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3063 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3064 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3065 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3066 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3067 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3068 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6B8B0BD||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 3069 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6B8C2FE||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 3070 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6B8B233||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 3071 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6B8C4A6||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 3072 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6B8C2FE||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 3073 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6B8C4A6| Linked Logon ID: 0x6B8C2FE| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3074 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6B8C2FE| Linked Logon ID: 0x6B8C4A6| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3075 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 3076 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3077 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 3078 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3079 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3080 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3081 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 3082 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 3083 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6B8B0BD||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 3084 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6B8B233| Linked Logon ID: 0x6B8B0BD| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3085 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6B8B0BD| Linked Logon ID: 0x6B8B233| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3086 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 3087 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3088 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 3089 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3090 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3091 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3092 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3093 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3094 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 3095 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 3096 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3097 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3098 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3099 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3100 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3101 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3102 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3103 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3104 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3105 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3106 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3107 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 3108 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3109 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3110 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3111 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3112 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3113 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3114 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3115 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3116 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3117 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3118 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3119 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3120 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3121 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3122 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3123 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3124 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3125 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3126 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3127 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3128 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3129 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3130 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3131 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3132 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3133 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3134 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3135 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3136 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3137 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3138 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3139 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3140 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3141 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3142 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3143 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3144 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3145 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3146 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3147 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3148 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3149 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3150 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3151 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3152 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3153 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3154 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3155 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3156 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3157 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3158 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3159 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 3160 | 2023-05-10 22:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3161 | 2023-05-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3162 | 2023-05-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3163 | 2023-05-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3164 | 2023-05-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3165 | 2023-05-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3166 | 2023-05-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3167 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3168 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3169 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3170 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3171 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3172 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3173 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3174 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3175 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3176 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3177 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3178 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3179 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3180 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3181 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3182 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3183 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3184 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3185 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3186 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3187 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3188 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3189 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3190 | 2023-05-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3191 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3192 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3193 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3194 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3195 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3196 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3197 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3198 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3199 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3200 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3201 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3202 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3203 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3204 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3205 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3206 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3207 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3208 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3209 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3210 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3211 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3212 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3213 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3214 | 2023-05-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3215 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3216 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3217 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3218 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3219 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3220 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3221 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3222 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3223 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3224 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3225 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3226 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3227 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3228 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3229 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3230 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3231 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3232 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3233 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3234 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3235 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3236 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3237 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3238 | 2023-05-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3239 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3240 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3241 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3242 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3243 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3244 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3245 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3246 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3247 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3248 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3249 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3250 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3251 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3252 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3253 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 3254 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3255 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3256 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3257 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3258 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3259 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3260 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3261 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3262 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3263 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3264 | 2023-05-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3265 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x77f0| Process Name: C:\Windows\System32\LogonUI.exe |
| 3266 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3267 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3268 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3269 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3270 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3271 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3272 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3273 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3274 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 3275 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3276 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3277 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3278 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3279 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3280 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3281 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3282 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3283 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3284 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3285 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3286 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3287 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3288 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3289 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3290 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3291 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3292 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3293 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3294 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3295 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3296 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3297 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3298 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3299 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3300 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3301 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3302 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3303 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3304 | 2023-05-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3305 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3306 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3307 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3308 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3309 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3310 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3311 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3312 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3313 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3314 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3315 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3316 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3317 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3318 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3319 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3320 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3321 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3322 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3323 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3324 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3325 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3326 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3327 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3328 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3329 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3330 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3331 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3332 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3333 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3334 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3335 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3336 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3337 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3338 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3339 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3340 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3341 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3342 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3343 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3344 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3345 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3346 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3347 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3348 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3349 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3350 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3351 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3352 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3353 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3354 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3355 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3356 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3357 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3358 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3359 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3360 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3361 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3362 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3363 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3364 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3365 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3366 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3367 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3368 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3369 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3370 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3371 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3372 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3373 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3374 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3375 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3376 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3377 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3378 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3379 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3380 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3381 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3382 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3383 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3384 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3385 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3386 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3387 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3388 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3389 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3390 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3391 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3392 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3393 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3394 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3395 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3396 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3397 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3398 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3399 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3400 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3401 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3402 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3403 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3404 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3405 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3406 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3407 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3408 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3409 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3410 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3411 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3412 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3413 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3414 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3415 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3416 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3417 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3418 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3419 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3420 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3421 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3422 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3423 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3424 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3425 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3426 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3427 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3428 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3429 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3430 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3431 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3432 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3433 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3434 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3435 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3436 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3437 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3438 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3439 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3440 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3441 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3442 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3443 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3444 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3445 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3446 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3447 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3448 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3449 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3450 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3451 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3452 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3453 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3454 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3455 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3456 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3457 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3458 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3459 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3460 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3461 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3462 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3463 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3464 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3465 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3466 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3467 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3468 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3469 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3470 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3471 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3472 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3473 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3474 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3475 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3476 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3477 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3478 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3479 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3480 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3481 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3482 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3483 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3484 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3485 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3486 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3487 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3488 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3489 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3490 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3491 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3492 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3493 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3494 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3495 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3496 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3497 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3498 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3499 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3500 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3501 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3502 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3503 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3504 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3505 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3506 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3507 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3508 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3509 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3510 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3511 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3512 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3513 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3514 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3515 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3516 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3517 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3518 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3519 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3520 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3521 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3522 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3523 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3524 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3525 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3526 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3527 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3528 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3529 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3530 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3531 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3532 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3533 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3534 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3535 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3536 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3537 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3538 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3539 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3540 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3541 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3542 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3543 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3544 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3545 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3546 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3547 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3548 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3549 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3550 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3551 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3552 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3553 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3554 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3555 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3556 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3557 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3558 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3559 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3560 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3561 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3562 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3563 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3564 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3565 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3566 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3567 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3568 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3569 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3570 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3571 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3572 | 2023-05-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3573 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3574 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3575 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3576 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3577 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3578 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3579 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3580 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3581 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3582 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3583 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3584 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3585 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3586 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3587 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3588 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3589 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3590 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3591 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3592 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3593 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3594 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3595 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3596 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3597 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3598 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3599 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3600 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3601 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3602 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3603 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3604 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3605 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3606 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3607 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3608 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3609 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3610 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3611 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3612 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3613 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3614 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3615 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3616 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3617 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3618 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3619 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3620 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3621 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3622 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3623 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3624 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3625 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3626 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3627 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3628 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3629 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3630 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3631 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3632 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3633 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3634 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3635 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3636 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3637 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3638 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3639 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3640 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3641 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 3642 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 3643 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3644 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3645 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3646 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3647 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3648 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3649 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3650 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3651 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3652 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3653 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3654 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3655 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3656 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3657 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3658 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3659 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3660 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3661 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3662 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3663 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3664 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3665 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3666 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3667 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3668 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3669 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3670 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3671 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3672 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3673 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3674 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3675 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3676 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3677 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3678 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3679 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3680 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3681 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3682 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3683 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3684 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3685 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3686 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3687 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3688 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3689 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3690 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3691 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3692 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3693 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3694 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3695 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3696 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3697 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3698 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3699 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3700 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3701 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3702 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3703 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3704 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3705 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3706 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3707 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3708 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3709 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3710 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3711 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3712 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3713 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3714 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3715 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3716 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3717 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3718 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3719 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3720 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3721 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3722 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3723 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3724 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3725 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3726 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3727 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3728 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3729 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3730 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3731 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3732 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3733 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3734 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3735 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3736 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3737 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3738 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3739 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3740 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3741 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3742 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3743 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3744 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3745 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3746 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3747 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3748 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3749 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3750 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3751 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3752 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3753 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3754 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3755 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3756 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3757 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3758 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3759 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3760 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3761 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3762 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3763 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3764 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3765 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3766 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3767 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3768 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3769 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3770 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3771 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3772 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3773 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3774 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3775 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3776 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3777 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3778 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3779 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3780 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3781 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3782 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3783 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3784 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3785 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3786 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3787 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3788 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3789 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3790 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3791 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3792 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3793 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3794 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3795 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3796 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3797 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3798 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3799 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3800 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3801 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3802 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3803 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3804 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3805 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3806 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3807 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3808 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3809 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3810 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3811 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3812 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3813 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3814 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3815 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3816 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3817 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3818 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3819 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3820 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3821 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3822 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3823 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3824 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3825 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3826 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3827 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3828 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3829 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3830 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3831 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3832 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3833 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3834 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3835 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3836 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3837 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3838 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3839 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3840 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3841 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3842 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3843 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3844 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3845 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3846 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3847 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3848 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3849 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3850 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3851 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3852 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3853 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3854 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3855 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3856 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3857 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3858 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3859 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3860 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3861 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3862 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3863 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3864 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3865 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3866 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3867 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3868 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3869 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3870 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3871 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3872 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3873 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3874 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3875 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3876 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3877 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3878 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3879 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3880 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3881 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3882 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3883 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3884 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3885 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3886 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3887 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3888 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3889 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3890 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3891 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3892 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3893 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3894 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3895 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3896 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3897 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3898 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3899 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3900 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3901 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3902 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3903 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3904 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3905 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3906 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3907 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3908 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3909 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3910 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3911 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3912 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3913 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3914 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3915 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3916 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3917 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3918 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3919 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3920 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3921 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3922 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3923 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3924 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3925 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3926 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3927 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3928 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3929 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3930 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3931 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3932 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3933 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3934 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3935 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3936 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3937 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3938 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3939 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3940 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3941 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3942 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3943 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3944 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3945 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3946 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3947 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3948 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3949 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3950 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3951 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3952 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3953 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 3954 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3955 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3956 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3957 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3958 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3959 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3960 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 3961 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4799 | Security Group Management | A security-enabled local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Group:| Security ID: BUILTIN\Administrators| Group Name: Administrators| Group Domain: Builtin||Process Information:| Process ID: 0x6a14| Process Name: C:\Windows\System32\svchost.exe |
| 3962 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3963 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3964 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3965 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3966 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3967 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3968 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3969 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3970 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3971 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3972 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3973 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3974 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3975 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3976 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3977 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3978 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3979 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3980 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3981 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3982 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3983 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3984 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3985 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3986 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3987 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3988 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3989 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3990 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3991 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3992 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3993 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3994 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3995 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3996 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3997 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3998 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 3999 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4000 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4001 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4002 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4003 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4004 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4005 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4006 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4007 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4008 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4009 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4010 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4011 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4012 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6A1CF71||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 4013 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6A1E26B||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 4014 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6A1CFF8||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 4015 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6A1E443||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 4016 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6A1E26B||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 4017 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6A1E443| Linked Logon ID: 0x6A1E26B| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4018 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6A1E26B| Linked Logon ID: 0x6A1E443| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4019 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 4020 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 4021 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 4022 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 4023 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6A1CF71||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 4024 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6A1CFF8| Linked Logon ID: 0x6A1CF71| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4025 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6A1CF71| Linked Logon ID: 0x6A1CFF8| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4026 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 4027 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 4028 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 4029 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 4030 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4031 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4032 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4033 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4034 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4035 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4036 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4037 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4038 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4039 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4040 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4041 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4042 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4043 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4044 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4045 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4046 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4047 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4048 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4049 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4050 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4051 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4052 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4053 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4054 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4055 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4056 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4057 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4058 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4059 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4060 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4061 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4062 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4063 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4064 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4065 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4066 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4067 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4068 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4069 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4070 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4071 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4072 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4073 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4074 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4075 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4076 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4077 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4078 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4079 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4080 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4081 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4082 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4083 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4084 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4085 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4086 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4087 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4088 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4089 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4090 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4091 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4092 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4093 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4094 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4095 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4096 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4097 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4098 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4099 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4100 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4101 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4102 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4103 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4104 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4105 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4106 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4107 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4108 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4109 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4110 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4111 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4112 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4113 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4114 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4115 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4116 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4117 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4118 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4119 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4120 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4121 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4122 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4123 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4124 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4125 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4126 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4127 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4128 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4129 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4130 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4131 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4132 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4133 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4134 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4135 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4136 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4137 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4138 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4139 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4140 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4141 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4142 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4143 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4144 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4145 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4146 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4147 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4148 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4149 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4150 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4151 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4152 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4153 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4154 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4155 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4156 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4157 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4158 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4159 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4160 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4161 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4162 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4163 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4164 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4165 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4166 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4167 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4168 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4169 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4170 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4171 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4172 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4173 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4174 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4175 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4176 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4177 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4178 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4179 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4180 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4181 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4182 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4183 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4184 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4185 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4186 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4187 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x7660| Process Name: C:\Windows\System32\LogonUI.exe |
| 4188 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4189 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4190 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4191 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4192 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4193 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4194 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4195 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4196 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4197 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4198 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4199 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4200 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4201 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4202 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4203 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4204 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4205 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4206 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4207 | 2023-05-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4208 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4209 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4210 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4211 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4212 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4213 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4214 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4215 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4216 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4217 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4218 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 4219 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4220 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4221 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4222 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4223 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4224 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4225 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4226 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4227 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4228 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4229 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4230 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4231 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4232 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4233 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4234 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4235 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4236 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4237 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4238 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4239 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4240 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4241 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4242 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4243 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4244 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4245 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4246 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4247 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4248 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4249 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4250 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4251 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4252 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4253 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4254 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4255 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4256 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4257 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4258 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4259 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4260 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4261 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4262 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4263 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4264 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4265 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4266 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4267 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4268 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 4269 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4270 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4271 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4272 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4273 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4274 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4275 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4276 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4277 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4278 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4279 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4280 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4281 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4282 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4283 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4284 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4285 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4286 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4287 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4288 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4289 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4290 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4291 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4292 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4293 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4294 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4295 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4296 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4297 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4298 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4299 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4300 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4301 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4302 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4303 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4304 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4305 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4306 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4307 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4308 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4309 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4310 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4311 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4312 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4313 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4314 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4315 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4316 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4317 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4318 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4319 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4320 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4321 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4322 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4323 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4324 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4325 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4326 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4327 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4328 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4329 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4330 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4331 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4332 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4333 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4334 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4335 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4336 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4337 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4338 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4339 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4340 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4341 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4342 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4343 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4344 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4345 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4346 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4347 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4348 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4349 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4350 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4351 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4352 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4353 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4354 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4355 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4356 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4357 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4358 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4359 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4360 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4361 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4362 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4363 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4364 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4365 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4366 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4367 | 2023-05-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4368 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4369 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4370 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4371 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4372 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4373 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4374 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4375 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4376 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4377 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4378 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4379 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4380 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4381 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4382 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4383 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4384 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4385 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4386 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4387 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4388 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4389 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4390 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4391 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4392 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4393 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4394 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4395 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4396 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4397 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4398 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4399 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4400 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4401 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4402 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4403 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4404 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4405 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4406 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4407 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4408 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4409 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4410 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4411 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4412 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4413 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4414 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4415 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4416 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4417 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4418 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4419 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4420 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4421 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4422 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4423 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4424 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4425 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4426 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4427 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4428 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4429 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4430 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4431 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4432 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4433 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4434 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4435 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4436 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4437 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4438 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4439 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4440 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4441 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4442 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4443 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4444 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4445 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4446 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4447 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4448 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4449 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4450 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4451 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4452 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4453 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4454 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4455 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4456 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4457 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4458 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4459 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4460 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4461 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4462 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4463 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4464 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4465 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4466 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4467 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4468 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4469 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4470 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4471 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4472 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4473 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4474 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4475 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4476 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4477 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4478 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4479 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4480 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4481 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4482 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4483 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4484 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4485 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4486 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4487 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4488 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4489 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4490 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4491 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4492 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4493 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4494 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4495 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4496 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4497 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4498 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4499 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4500 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4501 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4502 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4503 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4504 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4505 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4506 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4507 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4508 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4509 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4510 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4511 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4512 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4513 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4514 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4515 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4516 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4517 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4518 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4519 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4520 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4521 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4522 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4523 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4524 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4525 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4526 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4527 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4528 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4529 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4530 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4531 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4532 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4533 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4534 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4535 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4536 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4537 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4538 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4539 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4540 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4541 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4542 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4543 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4544 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4545 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4546 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4547 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4548 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4549 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4550 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4551 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4552 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4553 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4554 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4555 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4556 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4557 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4558 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4559 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4560 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4561 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4562 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4563 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4564 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4565 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4566 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4567 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4568 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4569 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4570 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4571 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4572 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4573 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4574 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4575 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4576 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4577 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4578 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4579 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4580 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4581 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4582 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4583 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4584 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4585 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4586 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4587 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4588 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4589 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 4590 | 2023-05-10 19:04:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4591 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4592 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4593 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4594 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4595 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4596 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4597 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4598 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4599 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4600 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4601 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4602 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4603 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4604 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4605 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4606 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4607 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4608 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4609 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4610 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4611 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4612 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4613 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4614 | 2023-05-10 18:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4615 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4616 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4617 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4618 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4619 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4620 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4621 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4622 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4623 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4624 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4625 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4626 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4627 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4628 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4629 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4630 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4631 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4632 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4633 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4634 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4635 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4636 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4637 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4638 | 2023-05-10 18:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4639 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4640 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4641 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4642 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4643 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4644 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4645 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4646 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4647 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4648 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4649 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4650 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4651 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4652 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4653 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4654 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4655 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4656 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4657 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4658 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4659 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4660 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4661 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4662 | 2023-05-10 18:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4663 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4664 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4665 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4666 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4667 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4668 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4669 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4670 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4671 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4672 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4673 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4674 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4675 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4676 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4677 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4678 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4679 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 4680 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 4681 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4682 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4683 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4684 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4685 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4686 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4687 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4688 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4689 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4690 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4691 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4692 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4693 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4694 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4695 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4696 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4697 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4698 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4699 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4700 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4701 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4702 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4703 | 2023-05-10 18:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4704 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4705 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4706 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4707 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4708 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4709 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4710 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4711 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4712 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4713 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4714 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4715 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4716 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4717 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4718 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4719 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4720 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4721 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4722 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4723 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4724 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4725 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4726 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4727 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4728 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4729 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4730 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4731 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4732 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4733 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4734 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4735 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4736 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4737 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4738 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4739 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4740 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4741 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4742 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4743 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4744 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4745 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4746 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4747 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4748 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4749 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4750 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4751 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4752 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4753 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4754 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4755 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4756 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4757 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4758 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4759 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4760 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4761 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4762 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4763 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4764 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4765 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4766 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4767 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4768 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4769 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4770 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4771 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4772 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4773 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4774 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4775 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4776 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4777 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4778 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4779 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4780 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4781 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4782 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4783 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4784 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4785 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4786 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4787 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4788 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4789 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4790 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4791 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4792 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4793 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4794 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4795 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4796 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4797 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4798 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4799 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4800 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4801 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4802 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4803 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4804 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4805 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4806 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4807 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4808 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4809 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4810 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4811 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4812 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4813 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4814 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4815 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4816 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4817 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4818 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4819 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4820 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4821 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4822 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4823 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4824 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4825 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4826 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4827 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4828 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4829 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4830 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4831 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4832 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4833 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4834 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4835 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4836 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4837 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4838 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4839 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4840 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4841 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4842 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4843 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4844 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4845 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4846 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4847 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4848 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4849 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4850 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4851 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4852 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4853 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4854 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4855 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4856 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4857 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4858 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4859 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4860 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4861 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4862 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4863 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4864 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4865 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4866 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4867 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4868 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4869 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4870 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4871 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4872 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4873 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4874 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4875 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4876 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4877 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4878 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4879 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4880 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4881 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4882 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4883 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4884 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4885 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4886 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4887 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4888 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4889 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4890 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4891 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4892 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4893 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4894 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4895 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4896 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4897 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4898 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4899 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 4900 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 4901 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4902 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4903 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4904 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4905 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4906 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4907 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4908 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4909 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4910 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4911 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4912 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4913 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4914 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4915 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4916 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4917 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4918 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4919 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4920 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4921 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4922 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4923 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4924 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4925 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4926 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4927 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4928 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4929 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4930 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4931 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4932 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4933 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4934 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4935 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4936 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4937 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4938 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4939 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4940 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4941 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4942 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4943 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4944 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4945 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4946 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4947 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4948 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4949 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4950 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4951 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4952 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4953 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4954 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4955 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4956 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4957 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4958 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4959 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4960 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4961 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4962 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4963 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4964 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4965 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4966 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4967 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4968 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4969 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4970 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4971 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4972 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4973 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4974 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4975 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4976 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4977 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4978 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4979 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4980 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4981 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4982 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4983 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4984 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4985 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4986 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4987 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4988 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4989 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4990 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4991 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4992 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4993 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4994 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4995 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4996 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4997 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4998 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 4999 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5000 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5001 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5002 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5003 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5004 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5005 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5006 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5007 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5008 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5009 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5010 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5011 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5012 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5013 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5014 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5015 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5016 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5017 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5018 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5019 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5020 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5021 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5022 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5023 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5024 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5025 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5026 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5027 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5028 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5029 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5030 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5031 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5032 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5033 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5034 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5035 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5036 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5037 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5038 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5039 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5040 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5041 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5042 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5043 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5044 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5045 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5046 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5047 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5048 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5049 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5050 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5051 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5052 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5053 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5054 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5055 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5056 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5057 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5058 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5059 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5060 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5061 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5062 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5063 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5064 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5065 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5066 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5067 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5068 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5069 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5070 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5071 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5072 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5073 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5074 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5075 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5076 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5077 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5078 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5079 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5080 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5081 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5082 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5083 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5084 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5085 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5086 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5087 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5088 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5089 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5090 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5091 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5092 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 5093 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 5094 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5095 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5096 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5097 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5098 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5099 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5100 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5101 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5102 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5103 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5104 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5105 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5106 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5107 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5108 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5109 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5110 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5111 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5112 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5113 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5114 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5115 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5116 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5117 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5118 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5119 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5120 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5121 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5122 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5123 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5124 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5125 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5126 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5127 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5128 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5129 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5130 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5131 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5132 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5133 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5134 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5135 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5136 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5137 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5138 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5139 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5140 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5141 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5142 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5143 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5144 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5145 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5146 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5147 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5148 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5149 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5150 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5151 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 5152 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 5153 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5154 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5155 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5156 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5157 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5158 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5159 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5160 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5161 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5162 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5163 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5164 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5165 | 2023-05-10 18:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5166 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 5167 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 5168 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x7660| Process Name: C:\Windows\System32\LogonUI.exe |
| 5169 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5170 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5171 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 5172 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 5173 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5174 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5175 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5176 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5177 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5178 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5179 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5180 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5181 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5182 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5183 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5184 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5185 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5186 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5187 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5188 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5189 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5190 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5191 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5192 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5193 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5194 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5195 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5196 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5197 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5198 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5199 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5200 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5201 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5202 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5203 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5204 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5205 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5206 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5207 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5208 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5209 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5210 | 2023-05-10 17:47:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5211 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5212 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5213 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5214 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5215 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5216 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5217 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5218 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5219 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5220 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5221 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5222 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5223 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5224 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5225 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5226 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5227 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5228 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5229 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5230 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5231 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5232 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5233 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5234 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5235 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5236 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5237 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5238 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5239 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5240 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5241 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5242 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5243 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5244 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5245 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5246 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5247 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5248 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5249 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5250 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5251 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5252 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5253 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5254 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5255 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5256 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5257 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5258 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5259 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5260 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5261 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5262 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5263 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5264 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5265 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5266 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5267 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5268 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5269 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5270 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5271 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5272 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5273 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5274 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5275 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5276 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5277 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5278 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5279 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5280 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5281 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5282 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5283 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5284 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5285 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5286 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5287 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5288 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5289 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5290 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5291 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5292 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5293 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5294 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5295 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5296 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5297 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5298 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5299 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5300 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5301 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5302 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5303 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5304 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5305 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5306 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5307 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5308 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5309 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5310 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5311 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5312 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5313 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5314 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5315 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5316 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5317 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5318 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5319 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5320 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5321 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5322 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5323 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5324 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5325 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5326 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5327 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5328 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5329 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5330 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5331 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5332 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5333 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5334 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5335 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5336 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5337 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5338 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5339 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5340 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5341 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5342 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5343 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5344 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5345 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5346 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5347 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5348 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5349 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5350 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5351 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5352 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5353 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5354 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5355 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5356 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5357 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5358 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5359 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5360 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5361 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5362 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5363 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5364 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5365 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5366 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5367 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5368 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5369 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5370 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5371 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5372 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5373 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5374 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5375 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5376 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5377 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5378 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5379 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5380 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5381 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5382 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5383 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5384 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5385 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5386 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5387 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5388 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5389 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5390 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5391 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5392 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5393 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5394 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5395 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5396 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5397 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5398 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5399 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5400 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5401 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5402 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5403 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5404 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5405 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5406 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5407 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5408 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5409 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5410 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5411 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5412 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5413 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5414 | 2023-05-10 17:46:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5415 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5416 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5417 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5418 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5419 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5420 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5421 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5422 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5423 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5424 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5425 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5426 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5427 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5428 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5429 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5430 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5431 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5432 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5433 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5434 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5435 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5436 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5437 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5438 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5439 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5440 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5441 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5442 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5443 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5444 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5445 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5446 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5447 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5448 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5449 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5450 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5451 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5452 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5453 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5454 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5455 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5456 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5457 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5458 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5459 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5460 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5461 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5462 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5463 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5464 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5465 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5466 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5467 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5468 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5469 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5470 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5471 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5472 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5473 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5474 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5475 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5476 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5477 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5478 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5479 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5480 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5481 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5482 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5483 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5484 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5485 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5486 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5487 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5488 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5489 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5490 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5491 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5492 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5493 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5494 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5495 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5496 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5497 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5498 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5499 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5500 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5501 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5502 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5503 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5504 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5505 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5506 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5507 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5508 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5509 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5510 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5511 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5512 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5513 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5514 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5515 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5516 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5517 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5518 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5519 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5520 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5521 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5522 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5523 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5524 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5525 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5526 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5527 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5528 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5529 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5530 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5531 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5532 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5533 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5534 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5535 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5536 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5537 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5538 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5539 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5540 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5541 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5542 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5543 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5544 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5545 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5546 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5547 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5548 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5549 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5550 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5551 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5552 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5553 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5554 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5555 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5556 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5557 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5558 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5559 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5560 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5561 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5562 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5563 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5564 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5565 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5566 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5567 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5568 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5569 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5570 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5571 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5572 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5573 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5574 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5575 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5576 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5577 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5578 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5579 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5580 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5581 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5582 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5583 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5584 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5585 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5586 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5587 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5588 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5589 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5590 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5591 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5592 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5593 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5594 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5595 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5596 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5597 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5598 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5599 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5600 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5601 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5602 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5603 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5604 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5605 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5606 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5607 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5608 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5609 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5610 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5611 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5612 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5613 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5614 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5615 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5616 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5617 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5618 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5619 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5620 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5621 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5622 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5623 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5624 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5625 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5626 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5627 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5628 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5629 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5630 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5631 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5632 | 2023-05-10 17:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5633 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5634 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5635 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5636 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5637 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5638 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5639 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5640 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5641 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5642 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5643 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5644 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5645 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5646 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5647 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5648 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5649 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5650 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5651 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5652 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5653 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5654 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5655 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5656 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5657 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5658 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5659 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5660 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5661 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5662 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5663 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5664 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5665 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5666 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5667 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5668 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5669 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5670 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5671 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5672 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5673 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5674 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5675 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5676 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5677 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5678 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5679 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5680 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5681 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5682 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5683 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5684 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5685 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5686 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5687 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5688 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5689 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5690 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5691 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5692 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5693 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5694 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5695 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5696 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5697 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5698 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5699 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5700 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5701 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5702 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5703 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5704 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5705 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5706 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5707 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5708 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5709 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5710 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5711 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5712 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5713 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5714 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5715 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5716 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5717 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5718 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5719 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5720 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5721 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5722 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5723 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5724 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5725 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5726 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5727 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5728 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5729 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5730 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5731 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5732 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5733 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5734 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5735 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5736 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5737 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5738 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5739 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5740 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5741 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5742 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5743 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5744 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5745 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5746 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5747 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5748 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5749 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5750 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5751 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5752 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5753 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5754 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5755 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5756 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5757 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5758 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5759 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5760 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5761 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5762 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5763 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5764 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5765 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5766 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5767 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5768 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5769 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5770 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5771 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5772 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5773 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5774 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5775 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5776 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5777 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5778 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5779 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5780 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5781 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5782 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5783 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5784 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5785 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5786 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5787 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5788 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5789 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5790 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5791 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5792 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5793 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5794 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5795 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5796 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5797 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5798 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5799 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5800 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5801 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5802 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5803 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5804 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5805 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5806 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5807 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5808 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5809 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5810 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5811 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5812 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5813 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5814 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5815 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5816 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5817 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5818 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5819 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5820 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5821 | 2023-05-10 17:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5822 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5823 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5824 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5825 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5826 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5827 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5828 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5829 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5830 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5831 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5832 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5833 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5834 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5835 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5836 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5837 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5838 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5839 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5840 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5841 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5842 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5843 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5844 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5845 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5846 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5847 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5848 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5849 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5850 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5851 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5852 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5853 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5854 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5855 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5856 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5857 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5858 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5859 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5860 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5861 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5862 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5863 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5864 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5865 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5866 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5867 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5868 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5869 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5870 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5871 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5872 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5873 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5874 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5875 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5876 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5877 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5878 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5879 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5880 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5881 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5882 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5883 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5884 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5885 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5886 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5887 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5888 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5889 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5890 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5891 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5892 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5893 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5894 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5895 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5896 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5897 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5898 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5899 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5900 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5901 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5902 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5903 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5904 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5905 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5906 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5907 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5908 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5909 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5910 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5911 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5912 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5913 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5914 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5915 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5916 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5917 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5918 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5919 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5920 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5921 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5922 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5923 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5924 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5925 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5926 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5927 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5928 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5929 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5930 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5931 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5932 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5933 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5934 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5935 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5936 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5937 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5938 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5939 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5940 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5941 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5942 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5943 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5944 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5945 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5946 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5947 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5948 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5949 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5950 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5951 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5952 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5953 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5954 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5955 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5956 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5957 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5958 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5959 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5960 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5961 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5962 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5963 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5964 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5965 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5966 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5967 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5968 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5969 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5970 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5971 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5972 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5973 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5974 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5975 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5976 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5977 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5978 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5979 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5980 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5981 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5982 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5983 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5984 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5985 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5986 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5987 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5988 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5989 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5990 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5991 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5992 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 5993 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 5994 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5995 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5996 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5997 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5998 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 5999 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6000 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6001 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6002 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6003 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6004 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6005 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6006 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6007 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6008 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6009 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6010 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6011 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6012 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6013 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6014 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6015 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6016 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6017 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6018 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6019 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6020 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6021 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6022 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6023 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6024 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6025 | 2023-05-10 17:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6026 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6027 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6028 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6029 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6030 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6031 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6032 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6033 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6034 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6035 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6036 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6037 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6038 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6039 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6040 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6041 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6042 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6043 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6044 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6045 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6046 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6047 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6048 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6049 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6050 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6051 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6052 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6053 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6054 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6055 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6056 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6057 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6058 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6059 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6060 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6061 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6062 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6063 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6064 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6065 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6066 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6067 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6068 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6069 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6070 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6071 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6072 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6073 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6074 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6075 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6076 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6077 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6078 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6079 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6080 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6081 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6082 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6083 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6084 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6085 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6086 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6087 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6088 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6089 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6090 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6091 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6092 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6093 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6094 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6095 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6096 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6097 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6098 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6099 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6100 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6101 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6102 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6103 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6104 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6105 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6106 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6107 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6108 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6109 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6110 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6111 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6112 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6113 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6114 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6115 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6116 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6117 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6118 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6119 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6120 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6121 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6122 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6123 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6124 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6125 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6126 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6127 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6128 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6129 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6130 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6131 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6132 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6133 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6134 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6135 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6136 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6137 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6138 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6139 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6140 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6141 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6142 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6143 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6144 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6145 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6146 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6147 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6148 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6149 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6150 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6151 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6152 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6153 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6154 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6155 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6156 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6157 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6158 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6159 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6160 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6161 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6162 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6163 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6164 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6165 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6166 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6167 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6168 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6169 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6170 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6171 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6172 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6173 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6174 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6175 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6176 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6177 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6178 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6179 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6180 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6181 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6182 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6183 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6184 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6185 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6186 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6187 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6188 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6189 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6190 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6191 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6192 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6193 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6194 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6195 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6196 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6197 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6198 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6199 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6200 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6201 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6202 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6203 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6204 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6205 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6206 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6207 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6208 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6209 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6210 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6211 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6212 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6213 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6214 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6215 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6216 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6217 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6218 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6219 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6220 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6221 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6222 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6223 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6224 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6225 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6226 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6227 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6228 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6229 | 2023-05-10 17:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6230 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6231 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6232 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6233 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6234 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6235 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6236 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6237 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6238 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6239 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6240 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6241 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6242 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6243 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6244 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6245 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6246 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6247 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6248 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6249 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6250 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6251 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6252 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6253 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6254 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6255 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6256 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6257 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6258 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6259 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6260 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6261 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6262 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6263 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6264 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6265 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6266 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6267 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6268 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6269 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6270 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6271 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6272 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6273 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6274 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6275 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6276 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6277 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6278 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6279 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6280 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6281 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6282 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6283 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6284 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6285 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6286 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6287 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6288 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6289 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6290 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6291 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6292 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6293 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6294 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6295 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6296 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6297 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6298 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6299 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6300 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6301 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6302 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6303 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6304 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6305 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6306 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6307 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6308 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6309 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6310 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6311 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6312 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6313 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6314 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6315 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6316 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6317 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6318 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6319 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6320 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6321 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6322 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6323 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6324 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6325 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6326 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6327 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6328 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6329 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6330 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6331 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6332 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6333 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6334 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6335 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6336 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6337 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6338 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6339 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6340 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6341 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6342 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6343 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6344 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6345 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6346 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6347 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6348 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6349 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6350 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6351 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6352 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6353 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6354 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6355 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6356 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6357 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6358 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6359 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6360 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6361 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6362 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6363 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6364 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6365 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6366 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6367 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6368 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6369 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6370 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6371 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6372 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6373 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6374 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6375 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6376 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6377 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6378 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6379 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6380 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6381 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6382 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6383 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6384 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6385 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6386 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6387 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6388 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6389 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6390 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6391 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6392 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6393 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6394 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6395 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6396 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6397 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6398 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6399 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6400 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6401 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6402 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6403 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6404 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6405 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6406 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6407 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6408 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6409 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6410 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6411 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6412 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6413 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6414 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6415 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6416 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6417 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6418 | 2023-05-10 17:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6419 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6420 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6421 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6422 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6423 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6424 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6425 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6426 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6427 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6428 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6429 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6430 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6431 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6432 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6433 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6434 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6435 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6436 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6437 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6438 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6439 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6440 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6441 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6442 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6443 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6444 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6445 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6446 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6447 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6448 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6449 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6450 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6451 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6452 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6453 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6454 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6455 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6456 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6457 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6458 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6459 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6460 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6461 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6462 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6463 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6464 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6465 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6466 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6467 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6468 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6469 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6470 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6471 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6472 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6473 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6474 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6475 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6476 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6477 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6478 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6479 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6480 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6481 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6482 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6483 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6484 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6485 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6486 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6487 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6488 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6489 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6490 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6491 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6492 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6493 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6494 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6495 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6496 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6497 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6498 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6499 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6500 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6501 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6502 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6503 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6504 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6505 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6506 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6507 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6508 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6509 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6510 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6511 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6512 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6513 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6514 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6515 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6516 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6517 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6518 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6519 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6520 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6521 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6522 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6523 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6524 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6525 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6526 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6527 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6528 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6529 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6530 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6531 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6532 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6533 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6534 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6535 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6536 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6537 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6538 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6539 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6540 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6541 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6542 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6543 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6544 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6545 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6546 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6547 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6548 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6549 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6550 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6551 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6552 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6553 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6554 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6555 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6556 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6557 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6558 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6559 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6560 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6561 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6562 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6563 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6564 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6565 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6566 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6567 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6568 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6569 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6570 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6571 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6572 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6573 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6574 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6575 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6576 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6577 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6578 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6579 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6580 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6581 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6582 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6583 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6584 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6585 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6586 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6587 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6588 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6589 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6590 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6591 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6592 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6593 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6594 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6595 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6596 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6597 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6598 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6599 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6600 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6601 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6602 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6603 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6604 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6605 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6606 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6607 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6608 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6609 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6610 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6611 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6612 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6613 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6614 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6615 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6616 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6617 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6618 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6619 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6620 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6621 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6622 | 2023-05-10 17:40:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6623 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6624 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6625 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6626 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6627 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6628 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6629 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6630 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6631 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6632 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6633 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6634 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6635 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6636 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6637 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6638 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6639 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6640 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6641 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6642 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6643 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6644 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6645 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6646 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6647 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6648 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6649 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6650 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6651 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6652 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6653 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6654 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6655 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6656 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6657 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6658 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6659 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6660 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6661 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6662 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6663 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6664 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6665 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6666 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6667 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6668 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6669 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6670 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6671 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6672 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6673 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6674 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6675 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6676 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6677 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6678 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6679 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6680 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6681 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6682 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6683 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6684 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6685 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6686 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6687 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6688 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6689 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6690 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6691 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6692 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6693 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6694 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6695 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6696 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6697 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6698 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6699 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6700 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6701 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6702 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6703 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6704 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6705 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6706 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6707 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6708 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6709 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6710 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6711 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6712 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6713 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6714 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6715 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6716 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6717 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6718 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6719 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6720 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6721 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6722 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6723 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6724 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6725 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6726 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6727 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6728 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6729 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6730 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6731 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6732 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6733 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6734 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6735 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6736 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6737 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6738 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6739 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6740 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6741 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6742 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6743 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6744 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6745 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6746 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6747 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6748 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6749 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6750 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6751 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6752 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6753 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6754 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6755 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6756 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6757 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6758 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6759 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6760 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6761 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6762 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6763 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6764 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6765 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6766 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6767 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6768 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6769 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6770 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6771 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6772 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6773 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6774 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6775 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6776 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6777 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6778 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6779 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6780 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6781 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6782 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6783 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6784 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6785 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6786 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6787 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6788 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6789 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6790 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6791 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6792 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6793 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6794 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6795 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6796 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6797 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6798 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6799 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6800 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6801 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6802 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6803 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6804 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6805 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6806 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6807 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6808 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6809 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6810 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6811 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6812 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6813 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6814 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6815 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6816 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6817 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6818 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6819 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6820 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6821 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6822 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6823 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6824 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6825 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6826 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6827 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6828 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6829 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6830 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6831 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6832 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6833 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6834 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6835 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6836 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6837 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6838 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6839 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6840 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6841 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6842 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6843 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6844 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6845 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6846 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6847 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6848 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6849 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6850 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6851 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6852 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6853 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6854 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6855 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6856 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6857 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6858 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6859 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6860 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6861 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6862 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6863 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6864 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6865 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6866 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6867 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6868 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6869 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6870 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6871 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6872 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6873 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6874 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6875 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6876 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6877 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6878 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6879 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6880 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6881 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6882 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6883 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6884 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6885 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6886 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6887 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6888 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6889 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6890 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6891 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6892 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6893 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6894 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6895 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6896 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6897 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6898 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6899 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6900 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6901 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6902 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6903 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6904 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6905 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6906 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6907 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6908 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6909 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6910 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6911 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6912 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6913 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6914 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6915 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6916 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6917 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6918 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 6919 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 6920 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6921 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6922 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6923 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6924 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6925 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6926 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6927 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6928 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6929 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6930 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6931 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6932 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6933 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6934 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6935 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6936 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6937 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6938 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6939 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6940 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6941 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6942 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6943 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6944 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6945 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6946 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6947 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6948 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6949 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6950 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6951 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6952 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6953 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6954 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6955 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6956 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6957 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6958 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6959 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6960 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6961 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6962 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6963 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6964 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6965 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6966 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6967 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6968 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6969 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6970 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6971 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6972 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6973 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6974 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6975 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6976 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6977 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6978 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6979 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6980 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6981 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6982 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6983 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6984 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6985 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6986 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6987 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6988 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6989 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6990 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6991 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6992 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6993 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6994 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6995 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 6996 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 6997 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6998 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 6999 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7000 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7001 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7002 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7003 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7004 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7005 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7006 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7007 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7008 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7009 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7010 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7011 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7012 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7013 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7014 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7015 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7016 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7017 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7018 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7019 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7020 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7021 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7022 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7023 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7024 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7025 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7026 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7027 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7028 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7029 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7030 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7031 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7032 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7033 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7034 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7035 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7036 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7037 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7038 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7039 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7040 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7041 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7042 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7043 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7044 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7045 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7046 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7047 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7048 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7049 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7050 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7051 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7052 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7053 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7054 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7055 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7056 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7057 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7058 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7059 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7060 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7061 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7062 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7063 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7064 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7065 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7066 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7067 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7068 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7069 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7070 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7071 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7072 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7073 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7074 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7075 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7076 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7077 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7078 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7079 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7080 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7081 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7082 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7083 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7084 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7085 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7086 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7087 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7088 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7089 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7090 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7091 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7092 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7093 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7094 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7095 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7096 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7097 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7098 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7099 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7100 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7101 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7102 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7103 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7104 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7105 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7106 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7107 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7108 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7109 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7110 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7111 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7112 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7113 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7114 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7115 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7116 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7117 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7118 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7119 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7120 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7121 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7122 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7123 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7124 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7125 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7126 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7127 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7128 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7129 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7130 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7131 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7132 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7133 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7134 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7135 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7136 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7137 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7138 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7139 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7140 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7141 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7142 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7143 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7144 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7145 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7146 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7147 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7148 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7149 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7150 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7151 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7152 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7153 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7154 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7155 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7156 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7157 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7158 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7159 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7160 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7161 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7162 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7163 | 2023-05-10 17:39:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7164 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7165 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7166 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7167 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7168 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7169 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7170 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7171 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7172 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7173 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7174 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7175 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7176 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7177 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7178 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7179 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7180 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7181 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7182 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7183 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7184 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7185 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7186 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7187 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7188 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7189 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7190 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7191 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7192 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7193 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7194 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7195 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7196 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7197 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7198 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7199 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7200 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7201 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7202 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7203 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7204 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7205 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7206 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7207 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7208 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7209 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7210 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7211 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7212 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7213 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7214 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7215 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7216 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7217 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7218 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7219 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7220 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7221 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7222 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7223 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7224 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7225 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7226 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7227 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7228 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7229 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7230 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7231 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7232 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7233 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7234 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7235 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7236 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7237 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7238 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7239 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7240 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7241 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7242 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7243 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7244 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7245 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7246 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7247 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7248 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7249 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7250 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7251 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7252 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7253 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7254 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7255 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7256 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7257 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7258 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7259 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7260 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7261 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7262 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7263 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7264 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7265 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7266 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7267 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7268 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7269 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7270 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7271 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7272 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7273 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7274 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7275 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7276 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7277 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7278 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7279 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7280 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7281 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7282 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7283 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7284 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7285 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7286 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7287 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7288 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7289 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7290 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7291 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7292 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7293 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7294 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7295 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7296 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7297 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7298 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7299 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7300 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7301 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7302 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7303 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7304 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7305 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7306 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7307 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7308 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7309 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7310 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7311 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7312 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7313 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7314 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7315 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7316 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7317 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7318 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7319 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7320 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7321 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7322 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7323 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7324 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7325 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7326 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7327 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7328 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7329 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7330 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7331 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7332 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7333 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7334 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7335 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7336 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7337 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7338 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7339 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7340 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7341 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7342 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7343 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7344 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7345 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7346 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7347 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7348 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7349 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7350 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7351 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7352 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7353 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7354 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7355 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7356 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7357 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7358 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7359 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7360 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7361 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7362 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7363 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7364 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7365 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7366 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7367 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7368 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7369 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7370 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7371 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7372 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7373 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7374 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7375 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7376 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7377 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7378 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7379 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7380 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7381 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7382 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7383 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7384 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7385 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7386 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7387 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7388 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7389 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7390 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7391 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7392 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7393 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7394 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7395 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7396 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7397 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7398 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7399 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7400 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7401 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7402 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7403 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7404 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7405 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7406 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7407 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7408 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7409 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7410 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7411 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7412 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7413 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7414 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7415 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7416 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7417 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7418 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7419 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7420 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7421 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7422 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7423 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7424 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7425 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7426 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7427 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7428 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7429 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7430 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7431 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7432 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7433 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7434 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7435 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7436 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7437 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7438 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7439 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7440 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7441 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7442 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7443 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7444 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7445 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7446 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7447 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7448 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7449 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7450 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7451 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7452 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7453 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7454 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7455 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7456 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7457 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7458 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7459 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7460 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7461 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7462 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7463 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7464 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7465 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7466 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7467 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7468 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7469 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7470 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7471 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7472 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7473 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7474 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7475 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7476 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7477 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7478 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7479 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7480 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7481 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7482 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7483 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7484 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7485 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7486 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7487 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7488 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7489 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7490 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7491 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7492 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7493 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7494 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7495 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7496 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7497 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7498 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7499 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7500 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7501 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7502 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7503 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7504 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7505 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7506 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7507 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7508 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7509 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7510 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7511 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7512 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7513 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7514 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7515 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7516 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7517 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7518 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7519 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7520 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7521 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7522 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7523 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7524 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7525 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7526 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7527 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7528 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7529 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7530 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7531 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7532 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7533 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7534 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7535 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7536 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7537 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7538 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7539 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7540 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7541 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7542 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7543 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7544 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7545 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7546 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7547 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7548 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7549 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7550 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7551 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7552 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7553 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7554 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7555 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7556 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7557 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7558 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7559 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7560 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7561 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7562 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7563 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7564 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7565 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7566 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7567 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7568 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7569 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7570 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7571 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7572 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7573 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7574 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7575 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7576 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7577 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7578 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7579 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7580 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7581 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7582 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7583 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7584 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7585 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7586 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7587 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7588 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7589 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7590 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7591 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7592 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7593 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7594 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7595 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7596 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7597 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7598 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7599 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7600 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7601 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7602 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7603 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7604 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7605 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7606 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7607 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7608 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7609 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7610 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7611 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7612 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7613 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7614 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7615 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7616 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7617 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7618 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7619 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7620 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7621 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7622 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7623 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7624 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7625 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7626 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7627 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7628 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7629 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7630 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7631 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7632 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7633 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7634 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7635 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7636 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7637 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7638 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7639 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7640 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7641 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7642 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7643 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7644 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7645 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7646 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7647 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7648 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7649 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7650 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7651 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7652 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7653 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7654 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7655 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7656 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7657 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7658 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7659 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7660 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7661 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7662 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7663 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7664 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7665 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7666 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7667 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7668 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7669 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7670 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7671 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7672 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7673 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7674 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7675 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7676 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7677 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7678 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7679 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7680 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7681 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7682 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7683 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7684 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7685 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7686 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7687 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7688 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7689 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7690 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7691 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7692 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7693 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7694 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7695 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7696 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7697 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7698 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7699 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7700 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7701 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7702 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7703 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7704 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7705 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7706 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7707 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7708 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7709 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7710 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7711 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7712 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7713 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7714 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7715 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7716 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7717 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7718 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7719 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7720 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7721 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7722 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7723 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7724 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7725 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7726 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7727 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7728 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7729 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7730 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7731 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7732 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7733 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7734 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7735 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7736 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7737 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7738 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7739 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7740 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7741 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7742 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7743 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7744 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7745 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7746 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7747 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7748 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7749 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7750 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7751 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7752 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7753 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7754 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7755 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7756 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7757 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7758 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7759 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7760 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7761 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7762 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7763 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7764 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7765 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7766 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7767 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7768 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7769 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7770 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7771 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7772 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7773 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7774 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7775 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7776 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7777 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7778 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7779 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7780 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7781 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7782 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7783 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7784 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7785 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7786 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7787 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7788 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7789 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7790 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7791 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7792 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7793 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7794 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7795 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7796 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7797 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7798 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7799 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7800 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7801 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7802 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7803 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7804 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7805 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7806 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7807 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7808 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7809 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7810 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7811 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7812 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7813 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7814 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7815 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7816 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7817 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7818 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7819 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7820 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7821 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7822 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7823 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7824 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7825 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7826 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7827 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7828 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7829 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7830 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7831 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7832 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7833 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7834 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7835 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7836 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7837 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7838 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7839 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7840 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7841 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7842 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7843 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7844 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7845 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7846 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7847 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7848 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7849 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7850 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7851 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7852 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7853 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7854 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7855 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7856 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7857 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7858 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7859 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7860 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7861 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7862 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7863 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7864 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7865 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7866 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7867 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7868 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7869 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7870 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 7871 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 7872 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7873 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7874 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7875 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7876 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7877 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7878 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7879 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7880 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7881 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7882 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7883 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7884 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7885 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7886 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7887 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7888 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7889 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7890 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7891 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7892 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7893 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7894 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7895 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7896 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7897 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7898 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7899 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7900 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7901 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7902 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7903 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7904 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7905 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7906 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7907 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7908 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7909 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7910 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7911 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7912 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7913 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7914 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7915 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7916 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7917 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7918 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7919 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7920 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7921 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7922 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7923 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7924 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7925 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7926 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7927 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7928 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7929 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7930 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7931 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7932 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7933 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7934 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7935 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7936 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7937 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7938 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7939 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7940 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7941 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7942 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7943 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7944 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7945 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7946 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7947 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7948 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7949 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7950 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7951 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7952 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7953 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7954 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7955 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7956 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7957 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7958 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7959 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7960 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7961 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7962 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7963 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7964 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7965 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7966 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7967 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7968 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7969 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7970 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7971 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7972 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7973 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7974 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7975 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7976 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7977 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7978 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7979 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7980 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7981 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 7982 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x67730C7||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 7983 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x677287C||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 7984 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6773282||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 7985 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x6772912||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 7986 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x67730C7||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 7987 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6773282| Linked Logon ID: 0x67730C7| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 7988 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x67730C7| Linked Logon ID: 0x6773282| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 7989 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 7990 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 7991 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 7992 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 7993 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x677287C||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 7994 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x6772912| Linked Logon ID: 0x677287C| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 7995 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x677287C| Linked Logon ID: 0x6772912| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 7996 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 7997 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 7998 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 7999 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 8000 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8001 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8002 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8003 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8004 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8005 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8006 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8007 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8008 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8009 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8010 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8011 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8012 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8013 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8014 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8015 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8016 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8017 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8018 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8019 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8020 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8021 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8022 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8023 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8024 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8025 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8026 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8027 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8028 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8029 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8030 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8031 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8032 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8033 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8034 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8035 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8036 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8037 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8038 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8039 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8040 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8041 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8042 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8043 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8044 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8045 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8046 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8047 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8048 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8049 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8050 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8051 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8052 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8053 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8054 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8055 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8056 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8057 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8058 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8059 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8060 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8061 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8062 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8063 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8064 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8065 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8066 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8067 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8068 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8069 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8070 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8071 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8072 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8073 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8074 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8075 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8076 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8077 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8078 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8079 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8080 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8081 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8082 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8083 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8084 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8085 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8086 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8087 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8088 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8089 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8090 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8091 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8092 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8093 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8094 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8095 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8096 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8097 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8098 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8099 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8100 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8101 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8102 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8103 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8104 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8105 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8106 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8107 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8108 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8109 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8110 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8111 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8112 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8113 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8114 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8115 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8116 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8117 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8118 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8119 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8120 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 8121 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 8122 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8123 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8124 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8125 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8126 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8127 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8128 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8129 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8130 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8131 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8132 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8133 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8134 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8135 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8136 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8137 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8138 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8139 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8140 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8141 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8142 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8143 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8144 | 2023-05-10 17:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8145 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x63c4| Process Name: C:\Windows\System32\LogonUI.exe |
| 8146 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8147 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8148 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8149 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8150 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8151 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8152 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8153 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8154 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8155 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8156 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8157 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8158 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8159 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8160 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8161 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8162 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8163 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8164 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8165 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8166 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8167 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8168 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8169 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8170 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8171 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8172 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8173 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8174 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8175 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8176 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8177 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8178 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8179 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8180 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8181 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8182 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8183 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8184 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8185 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8186 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8187 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8188 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8189 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8190 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8191 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8192 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8193 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8194 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8195 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8196 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8197 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8198 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8199 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8200 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8201 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8202 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8203 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8204 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8205 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8206 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8207 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8208 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8209 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8210 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8211 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8212 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8213 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8214 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8215 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8216 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8217 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8218 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8219 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8220 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8221 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8222 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8223 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8224 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8225 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8226 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8227 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8228 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8229 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8230 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8231 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8232 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8233 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8234 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8235 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8236 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8237 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8238 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8239 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8240 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8241 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8242 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8243 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8244 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8245 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8246 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8247 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8248 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8249 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8250 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8251 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8252 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8253 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8254 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8255 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8256 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8257 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8258 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8259 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8260 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8261 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8262 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8263 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8264 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8265 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8266 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8267 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8268 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8269 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8270 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8271 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8272 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8273 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8274 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8275 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8276 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8277 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8278 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8279 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8280 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8281 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8282 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8283 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8284 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8285 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8286 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8287 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8288 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8289 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8290 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8291 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8292 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8293 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8294 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8295 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8296 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8297 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8298 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8299 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8300 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8301 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8302 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8303 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8304 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8305 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8306 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8307 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8308 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8309 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8310 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8311 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8312 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8313 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8314 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8315 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8316 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8317 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8318 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8319 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8320 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8321 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8322 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8323 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8324 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8325 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8326 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8327 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8328 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8329 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8330 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8331 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8332 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8333 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8334 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8335 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8336 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8337 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8338 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8339 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8340 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8341 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8342 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8343 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8344 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8345 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_office.net| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8346 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_api.application| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8347 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8348 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8349 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8350 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8351 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8352 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8353 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8354 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8355 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8356 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8357 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8358 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8359 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8360 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8361 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8362 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 8363 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 8364 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8365 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8366 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8367 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8368 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8369 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8370 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8371 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8372 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8373 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8374 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8375 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8376 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8377 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8378 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8379 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8380 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8381 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8382 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8383 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8384 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8385 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8386 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8387 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8388 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8389 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8390 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8391 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8392 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8393 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8394 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8395 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8396 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8397 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8398 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8399 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8400 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8401 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8402 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8403 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8404 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8405 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8406 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8407 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8408 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8409 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8410 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8411 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8412 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8413 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8414 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8415 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8416 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8417 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8418 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8419 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8420 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8421 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8422 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8423 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8424 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8425 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8426 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8427 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8428 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8429 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8430 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8431 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8432 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8433 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8434 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8435 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8436 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8437 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 8438 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 8439 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8440 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8441 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8442 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8443 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8444 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8445 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8446 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8447 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8448 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8449 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8450 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8451 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8452 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8453 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8454 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8455 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8456 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8457 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8458 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8459 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8460 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8461 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8462 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8463 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8464 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8465 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8466 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8467 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8468 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8469 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8470 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8471 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8472 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8473 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8474 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8475 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 8476 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 8477 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8478 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8479 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8480 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8481 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8482 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8483 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8484 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8485 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8486 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8487 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8488 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8489 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8490 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8491 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8492 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8493 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8494 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8495 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8496 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8497 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8498 | 2023-05-10 16:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8499 | 2023-05-10 15:30:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 8500 | 2023-05-10 15:30:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 8501 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8502 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8503 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8504 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8505 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8506 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8507 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8508 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8509 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8510 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8511 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8512 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8513 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8514 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8515 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8516 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8517 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8518 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8519 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8520 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8521 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8522 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8523 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8524 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8525 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8526 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8527 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8528 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8529 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8530 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8531 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8532 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8533 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8534 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8535 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8536 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8537 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8538 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8539 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8540 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8541 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8542 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8543 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8544 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8545 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8546 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8547 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8548 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8549 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8550 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8551 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8552 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8553 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8554 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8555 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8556 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8557 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8558 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8559 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8560 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8561 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8562 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8563 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8564 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8565 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8566 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8567 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8568 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8569 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8570 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8571 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8572 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8573 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8574 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8575 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8576 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8577 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8578 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8579 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8580 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8581 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8582 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8583 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8584 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8585 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8586 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8587 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8588 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8589 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8590 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8591 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8592 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8593 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8594 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8595 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8596 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8597 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8598 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8599 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8600 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8601 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8602 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8603 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8604 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8605 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8606 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8607 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8608 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8609 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8610 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8611 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8612 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8613 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8614 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8615 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8616 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8617 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8618 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8619 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8620 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8621 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8622 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8623 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8624 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8625 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8626 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8627 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8628 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8629 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8630 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8631 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8632 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8633 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8634 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8635 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8636 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8637 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8638 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8639 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8640 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8641 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8642 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8643 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8644 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8645 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8646 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8647 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8648 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8649 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8650 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8651 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8652 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8653 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8654 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8655 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8656 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8657 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8658 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8659 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8660 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8661 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8662 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8663 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8664 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8665 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8666 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8667 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8668 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8669 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8670 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8671 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8672 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8673 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8674 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8675 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8676 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8677 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8678 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8679 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8680 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8681 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8682 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8683 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8684 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8685 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8686 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8687 | 2023-05-10 15:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8688 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8689 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8690 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8691 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8692 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8693 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8694 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8695 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8696 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8697 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8698 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8699 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8700 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8701 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8702 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8703 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8704 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8705 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8706 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8707 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8708 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8709 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8710 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8711 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8712 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8713 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8714 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8715 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8716 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8717 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8718 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8719 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8720 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8721 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8722 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8723 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8724 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8725 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8726 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8727 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8728 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8729 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8730 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8731 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8732 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8733 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8734 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8735 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8736 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8737 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8738 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8739 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8740 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8741 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8742 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8743 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8744 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8745 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8746 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8747 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8748 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8749 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8750 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8751 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8752 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8753 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8754 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8755 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8756 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8757 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8758 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8759 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8760 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8761 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8762 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8763 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8764 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8765 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8766 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8767 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8768 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8769 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8770 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8771 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8772 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8773 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8774 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8775 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8776 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8777 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8778 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8779 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8780 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8781 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8782 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8783 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8784 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8785 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8786 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8787 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8788 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8789 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8790 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8791 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8792 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8793 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8794 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8795 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8796 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8797 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8798 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8799 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8800 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8801 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8802 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8803 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8804 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8805 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8806 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8807 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8808 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8809 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8810 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8811 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8812 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8813 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8814 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8815 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8816 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8817 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8818 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8819 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8820 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8821 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8822 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8823 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8824 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8825 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8826 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8827 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8828 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8829 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8830 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8831 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8832 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8833 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8834 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8835 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8836 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8837 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8838 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8839 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8840 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8841 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8842 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8843 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8844 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8845 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8846 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8847 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8848 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8849 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8850 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8851 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8852 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8853 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8854 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8855 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8856 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8857 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8858 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8859 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8860 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8861 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8862 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8863 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8864 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8865 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8866 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8867 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8868 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8869 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8870 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8871 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8872 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8873 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8874 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8875 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8876 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8877 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8878 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8879 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8880 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8881 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8882 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8883 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8884 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8885 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8886 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8887 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8888 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8889 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8890 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8891 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8892 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8893 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8894 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8895 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8896 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8897 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8898 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8899 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8900 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8901 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8902 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8903 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8904 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8905 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8906 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8907 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8908 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8909 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8910 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8911 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8912 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8913 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8914 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8915 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8916 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8917 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8918 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8919 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8920 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8921 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8922 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8923 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8924 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8925 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8926 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8927 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8928 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8929 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8930 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8931 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8932 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8933 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8934 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8935 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8936 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8937 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8938 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8939 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8940 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8941 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8942 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8943 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8944 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8945 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8946 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8947 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8948 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8949 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8950 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8951 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8952 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8953 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8954 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8955 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 8956 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 8957 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8958 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8959 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8960 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8961 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8962 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8963 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8964 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8965 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8966 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8967 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8968 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8969 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8970 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8971 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8972 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8973 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8974 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8975 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8976 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8977 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8978 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8979 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8980 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8981 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8982 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8983 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8984 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8985 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8986 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8987 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8988 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8989 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8990 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8991 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8992 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8993 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8994 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8995 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8996 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8997 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8998 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 8999 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9000 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9001 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9002 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9003 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9004 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9005 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9006 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9007 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9008 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9009 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9010 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9011 | 2023-05-10 15:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9012 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9013 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9014 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9015 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9016 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9017 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9018 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9019 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9020 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9021 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9022 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9023 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9024 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9025 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9026 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9027 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9028 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9029 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9030 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9031 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9032 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9033 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9034 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9035 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9036 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9037 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9038 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9039 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9040 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9041 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9042 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9043 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9044 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9045 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9046 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9047 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9048 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9049 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9050 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9051 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9052 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9053 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9054 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9055 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9056 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9057 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9058 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9059 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9060 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9061 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9062 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9063 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9064 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9065 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9066 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9067 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9068 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9069 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9070 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9071 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9072 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9073 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9074 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9075 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9076 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9077 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9078 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9079 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9080 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9081 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9082 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9083 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9084 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9085 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9086 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9087 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9088 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9089 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9090 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9091 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9092 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9093 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9094 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9095 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9096 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9097 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9098 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9099 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9100 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9101 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9102 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9103 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9104 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9105 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9106 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9107 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9108 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9109 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9110 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9111 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9112 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9113 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9114 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9115 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9116 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9117 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9118 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9119 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9120 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9121 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9122 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9123 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9124 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9125 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9126 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9127 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9128 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9129 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9130 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9131 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9132 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9133 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9134 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9135 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9136 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9137 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9138 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9139 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9140 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9141 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9142 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9143 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9144 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9145 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9146 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9147 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9148 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9149 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9150 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9151 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9152 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9153 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9154 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9155 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9156 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9157 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9158 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9159 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9160 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9161 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9162 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9163 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9164 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9165 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9166 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9167 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9168 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9169 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9170 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9171 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9172 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9173 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9174 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9175 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9176 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9177 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9178 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9179 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9180 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9181 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9182 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9183 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9184 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9185 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9186 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9187 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9188 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9189 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9190 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9191 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9192 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9193 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9194 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9195 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9196 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9197 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9198 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9199 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9200 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9201 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9202 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9203 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9204 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9205 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9206 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9207 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9208 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9209 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9210 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9211 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9212 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9213 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9214 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9215 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9216 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9217 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9218 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9219 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9220 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9221 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9222 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9223 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9224 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9225 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9226 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9227 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9228 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9229 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9230 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9231 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9232 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9233 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9234 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9235 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9236 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9237 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9238 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9239 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9240 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9241 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9242 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9243 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9244 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9245 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9246 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9247 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9248 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9249 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9250 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9251 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9252 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9253 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9254 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9255 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9256 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9257 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9258 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9259 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9260 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9261 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9262 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9263 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9264 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9265 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9266 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9267 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9268 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9269 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9270 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9271 | 2023-05-10 15:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9272 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9273 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9274 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9275 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9276 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9277 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9278 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9279 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9280 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9281 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9282 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9283 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9284 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9285 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9286 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9287 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9288 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9289 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9290 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9291 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9292 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9293 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9294 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9295 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9296 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9297 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9298 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9299 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9300 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9301 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9302 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9303 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9304 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9305 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9306 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9307 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9308 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9309 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9310 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9311 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9312 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9313 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9314 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9315 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9316 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9317 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9318 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9319 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9320 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9321 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9322 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9323 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9324 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9325 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9326 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9327 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9328 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9329 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9330 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9331 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9332 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9333 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9334 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9335 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9336 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9337 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9338 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9339 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9340 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9341 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9342 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9343 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9344 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9345 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9346 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9347 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9348 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9349 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9350 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9351 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9352 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9353 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9354 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9355 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9356 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9357 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9358 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9359 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 9360 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9361 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9362 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9363 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9364 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9365 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9366 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9367 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9368 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9369 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9370 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9371 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9372 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9373 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9374 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9375 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9376 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9377 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9378 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9379 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9380 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9381 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9382 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9383 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9384 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9385 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9386 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9387 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9388 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9389 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9390 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9391 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9392 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9393 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9394 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9395 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9396 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9397 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9398 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9399 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9400 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9401 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9402 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9403 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9404 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9405 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9406 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9407 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9408 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9409 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 9410 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 9411 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9412 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9413 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9414 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9415 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9416 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9417 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9418 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9419 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9420 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9421 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9422 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9423 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9424 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9425 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9426 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9427 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9428 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9429 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9430 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9431 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9432 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9433 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9434 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9435 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9436 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9437 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9438 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9439 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9440 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9441 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9442 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9443 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9444 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9445 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9446 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9447 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9448 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9449 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9450 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9451 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9452 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9453 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9454 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9455 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9456 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9457 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9458 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9459 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9460 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9461 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9462 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9463 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9464 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9465 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9466 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9467 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9468 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9469 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9470 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9471 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9472 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9473 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9474 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9475 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9476 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9477 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9478 | 2023-05-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9479 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9480 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9481 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9482 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9483 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9484 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9485 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9486 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9487 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9488 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9489 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9490 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9491 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9492 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9493 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9494 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9495 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9496 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x63c4| Process Name: C:\Windows\System32\LogonUI.exe |
| 9497 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9498 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9499 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9500 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9501 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9502 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9503 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9504 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9505 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9506 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9507 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9508 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9509 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9510 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9511 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9512 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9513 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9514 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9515 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9516 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9517 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9518 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9519 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9520 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9521 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9522 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9523 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9524 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9525 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9526 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9527 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9528 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9529 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9530 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9531 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9532 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9533 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9534 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9535 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9536 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9537 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9538 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9539 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9540 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9541 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9542 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9543 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9544 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9545 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9546 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9547 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9548 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9549 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9550 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9551 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9552 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9553 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9554 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9555 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9556 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9557 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9558 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9559 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9560 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9561 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9562 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9563 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9564 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9565 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9566 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9567 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9568 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9569 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9570 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9571 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9572 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9573 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9574 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9575 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9576 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9577 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9578 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9579 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9580 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9581 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9582 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9583 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9584 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9585 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9586 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9587 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9588 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9589 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9590 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9591 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9592 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9593 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9594 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9595 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9596 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9597 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9598 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9599 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9600 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9601 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9602 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9603 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9604 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9605 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9606 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9607 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9608 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9609 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9610 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9611 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9612 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9613 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9614 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9615 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9616 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9617 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9618 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9619 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9620 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9621 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9622 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9623 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9624 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9625 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9626 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9627 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9628 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9629 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9630 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9631 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9632 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9633 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9634 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9635 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9636 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9637 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9638 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9639 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9640 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9641 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9642 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9643 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9644 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9645 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9646 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9647 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9648 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9649 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9650 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9651 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9652 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9653 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9654 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9655 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9656 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9657 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9658 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9659 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9660 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9661 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9662 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9663 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9664 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9665 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9666 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9667 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9668 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9669 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9670 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9671 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9672 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9673 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9674 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9675 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9676 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9677 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9678 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9679 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9680 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9681 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9682 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9683 | 2023-05-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9684 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9685 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9686 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9687 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9688 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9689 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9690 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9691 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9692 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9693 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9694 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9695 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9696 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9697 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9698 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9699 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9700 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9701 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9702 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9703 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9704 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9705 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9706 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9707 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9708 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9709 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9710 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9711 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9712 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9713 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9714 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9715 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9716 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9717 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9718 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9719 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9720 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9721 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9722 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9723 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9724 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9725 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9726 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9727 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9728 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9729 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9730 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9731 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9732 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9733 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9734 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9735 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9736 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9737 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9738 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9739 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9740 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9741 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9742 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9743 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9744 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9745 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9746 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9747 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9748 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9749 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9750 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9751 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9752 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9753 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9754 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9755 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9756 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9757 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9758 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9759 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9760 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9761 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9762 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9763 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9764 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9765 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9766 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9767 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9768 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9769 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9770 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9771 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9772 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9773 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9774 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9775 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9776 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9777 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9778 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9779 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9780 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9781 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9782 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9783 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9784 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9785 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9786 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9787 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9788 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9789 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9790 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9791 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9792 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9793 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9794 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9795 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9796 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9797 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9798 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9799 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9800 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9801 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9802 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9803 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9804 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9805 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9806 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9807 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9808 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9809 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9810 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9811 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9812 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9813 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9814 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9815 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9816 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9817 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9818 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9819 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9820 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9821 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9822 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9823 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9824 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9825 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9826 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9827 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9828 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9829 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9830 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9831 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9832 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9833 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9834 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9835 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9836 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9837 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9838 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9839 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9840 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9841 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9842 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9843 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9844 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9845 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9846 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9847 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9848 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9849 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9850 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9851 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9852 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9853 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9854 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9855 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9856 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9857 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9858 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9859 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9860 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9861 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9862 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9863 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9864 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9865 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9866 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9867 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9868 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9869 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9870 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9871 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9872 | 2023-05-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9873 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9874 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9875 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9876 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9877 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9878 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9879 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9880 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9881 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9882 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9883 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9884 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9885 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9886 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9887 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9888 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9889 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9890 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9891 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9892 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9893 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9894 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9895 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9896 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9897 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9898 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9899 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9900 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9901 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9902 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9903 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9904 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9905 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9906 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9907 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9908 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9909 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9910 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9911 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9912 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9913 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9914 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9915 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9916 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9917 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9918 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9919 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9920 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9921 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9922 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9923 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9924 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9925 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9926 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9927 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9928 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9929 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9930 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9931 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9932 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9933 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9934 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9935 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9936 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9937 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9938 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9939 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9940 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9941 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9942 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9943 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9944 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9945 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9946 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9947 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9948 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9949 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9950 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9951 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9952 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9953 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9954 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9955 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9956 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9957 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9958 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9959 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9960 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9961 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9962 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9963 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9964 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9965 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9966 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9967 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9968 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9969 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9970 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9971 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9972 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9973 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9974 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9975 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9976 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9977 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9978 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9979 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9980 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9981 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9982 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9983 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9984 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9985 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9986 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9987 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9988 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9989 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9990 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9991 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9992 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 9993 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 9994 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9995 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9996 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9997 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9998 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 9999 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10000 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10001 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10002 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10003 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10004 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10005 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10006 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10007 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10008 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10009 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10010 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10011 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10012 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10013 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10014 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10015 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10016 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10017 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10018 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10019 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10020 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10021 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10022 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10023 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10024 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10025 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10026 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10027 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10028 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10029 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10030 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10031 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10032 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10033 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10034 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10035 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10036 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10037 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10038 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10039 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10040 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10041 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10042 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10043 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10044 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10045 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10046 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10047 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10048 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10049 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10050 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10051 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10052 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10053 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10054 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10055 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10056 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10057 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10058 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10059 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10060 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10061 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10062 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10063 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10064 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10065 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10066 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10067 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10068 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10069 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10070 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10071 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10072 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10073 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10074 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10075 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10076 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10077 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10078 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10079 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10080 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10081 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10082 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10083 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10084 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10085 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10086 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10087 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10088 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10089 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10090 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10091 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10092 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10093 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10094 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10095 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10096 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10097 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10098 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10099 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10100 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10101 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10102 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10103 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10104 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10105 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10106 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10107 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10108 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10109 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10110 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10111 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10112 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10113 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10114 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10115 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10116 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10117 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10118 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10119 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10120 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10121 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10122 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10123 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10124 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10125 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10126 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10127 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10128 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10129 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10130 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10131 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10132 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10133 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10134 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10135 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10136 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10137 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10138 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10139 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10140 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10141 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10142 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10143 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10144 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10145 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10146 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10147 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10148 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10149 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10150 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10151 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10152 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10153 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10154 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10155 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10156 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10157 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10158 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10159 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10160 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10161 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10162 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10163 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10164 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10165 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10166 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10167 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10168 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10169 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10170 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10171 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10172 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10173 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10174 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10175 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10176 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10177 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10178 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10179 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10180 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10181 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10182 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10183 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10184 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10185 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10186 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10187 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10188 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10189 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10190 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10191 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10192 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10193 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10194 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10195 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10196 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10197 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10198 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10199 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10200 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10201 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10202 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10203 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10204 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10205 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10206 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10207 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10208 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10209 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10210 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10211 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10212 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10213 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10214 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10215 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10216 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10217 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10218 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10219 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10220 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10221 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10222 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10223 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10224 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10225 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10226 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10227 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10228 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10229 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10230 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10231 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10232 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10233 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10234 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10235 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10236 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10237 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10238 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10239 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10240 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10241 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10242 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10243 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10244 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10245 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10246 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10247 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10248 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10249 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10250 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10251 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10252 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10253 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10254 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10255 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10256 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10257 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10258 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10259 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10260 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10261 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10262 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10263 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10264 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10265 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10266 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10267 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10268 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10269 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10270 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10271 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10272 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10273 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10274 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10275 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10276 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10277 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10278 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10279 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10280 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10281 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10282 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10283 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10284 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10285 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10286 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10287 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10288 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10289 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10290 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10291 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10292 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10293 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10294 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10295 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10296 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10297 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10298 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10299 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10300 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10301 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10302 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10303 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10304 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10305 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10306 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10307 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10308 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10309 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10310 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10311 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10312 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10313 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10314 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10315 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10316 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10317 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10318 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10319 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10320 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10321 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10322 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10323 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10324 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10325 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10326 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10327 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10328 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10329 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10330 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10331 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10332 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10333 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10334 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10335 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10336 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10337 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10338 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10339 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10340 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10341 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10342 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10343 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10344 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10345 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10346 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10347 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10348 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10349 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10350 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10351 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10352 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10353 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10354 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10355 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10356 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10357 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10358 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10359 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10360 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10361 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10362 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10363 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10364 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10365 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10366 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10367 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10368 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10369 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10370 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10371 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10372 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10373 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10374 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10375 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10376 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10377 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10378 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10379 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10380 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10381 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10382 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10383 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10384 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10385 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10386 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10387 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10388 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10389 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10390 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10391 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10392 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10393 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10394 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10395 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10396 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10397 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10398 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10399 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10400 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10401 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10402 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10403 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10404 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10405 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10406 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10407 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10408 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10409 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10410 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10411 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10412 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10413 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10414 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10415 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10416 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10417 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10418 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10419 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10420 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10421 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10422 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10423 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10424 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10425 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10426 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10427 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10428 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10429 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10430 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10431 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10432 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10433 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10434 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10435 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10436 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10437 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10438 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10439 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10440 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10441 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10442 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10443 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10444 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10445 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10446 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10447 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10448 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10449 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10450 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10451 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10452 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10453 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10454 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10455 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10456 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10457 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10458 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10459 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10460 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10461 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10462 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10463 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10464 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10465 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10466 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10467 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10468 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10469 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10470 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10471 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10472 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10473 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10474 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10475 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10476 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10477 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10478 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10479 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10480 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10481 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10482 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 10483 | 2023-05-10 15:23:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 10484 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10485 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10486 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10487 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10488 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10489 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10490 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10491 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10492 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10493 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10494 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10495 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10496 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10497 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10498 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10499 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10500 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10501 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10502 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10503 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10504 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10505 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10506 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10507 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10508 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10509 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10510 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10511 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10512 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10513 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10514 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10515 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10516 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10517 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10518 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10519 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10520 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10521 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10522 | 2023-05-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10523 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10524 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10525 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10526 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10527 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10528 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10529 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10530 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10531 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10532 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10533 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10534 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10535 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10536 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10537 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10538 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10539 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10540 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10541 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10542 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10543 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10544 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10545 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10546 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10547 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10548 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10549 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10550 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10551 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10552 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10553 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10554 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10555 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10556 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10557 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10558 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10559 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10560 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10561 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10562 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10563 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10564 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10565 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10566 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10567 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10568 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10569 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10570 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10571 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10572 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10573 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10574 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10575 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10576 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10577 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10578 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10579 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10580 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10581 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10582 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10583 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10584 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10585 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10586 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10587 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10588 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10589 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10590 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10591 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10592 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10593 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10594 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10595 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10596 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10597 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10598 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10599 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10600 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10601 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10602 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10603 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10604 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10605 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10606 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10607 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10608 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10609 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10610 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10611 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10612 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10613 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10614 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10615 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10616 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10617 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10618 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10619 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10620 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10621 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10622 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10623 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10624 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10625 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10626 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10627 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10628 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10629 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10630 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10631 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10632 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10633 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10634 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10635 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10636 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10637 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10638 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10639 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10640 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10641 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10642 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10643 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10644 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10645 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10646 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10647 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10648 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10649 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10650 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10651 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10652 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10653 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10654 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10655 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10656 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10657 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10658 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10659 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10660 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10661 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10662 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10663 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10664 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10665 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10666 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10667 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10668 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10669 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10670 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10671 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10672 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10673 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10674 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10675 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10676 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10677 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10678 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10679 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10680 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10681 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10682 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10683 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10684 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10685 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10686 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10687 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10688 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10689 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10690 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10691 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10692 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10693 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10694 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10695 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10696 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10697 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10698 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10699 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10700 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10701 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10702 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10703 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10704 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10705 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10706 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10707 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 10708 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 10709 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10710 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10711 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10712 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10713 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10714 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10715 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10716 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10717 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10718 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10719 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10720 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10721 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10722 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10723 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10724 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10725 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10726 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10727 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10728 | 2023-05-10 15:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10729 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10730 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10731 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10732 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10733 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10734 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10735 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10736 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10737 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10738 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10739 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10740 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10741 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 10742 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 10743 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10744 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10745 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10746 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10747 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10748 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10749 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10750 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10751 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10752 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10753 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10754 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10755 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10756 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10757 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10758 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10759 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10760 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10761 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10762 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10763 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10764 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10765 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10766 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10767 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10768 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10769 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10770 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10771 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10772 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10773 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10774 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10775 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10776 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10777 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10778 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10779 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10780 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10781 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10782 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10783 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10784 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10785 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10786 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10787 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10788 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10789 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10790 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10791 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10792 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10793 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10794 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10795 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10796 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10797 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10798 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10799 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10800 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10801 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10802 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10803 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10804 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10805 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10806 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10807 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10808 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10809 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10810 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10811 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10812 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10813 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10814 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10815 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10816 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10817 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10818 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10819 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10820 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10821 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10822 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10823 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10824 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10825 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10826 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10827 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10828 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10829 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10830 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10831 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10832 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10833 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10834 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10835 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10836 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10837 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10838 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10839 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10840 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10841 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10842 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10843 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10844 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10845 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10846 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10847 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10848 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10849 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10850 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10851 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10852 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10853 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10854 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10855 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10856 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10857 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10858 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10859 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10860 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10861 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10862 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10863 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10864 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10865 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10866 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10867 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10868 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10869 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10870 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10871 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10872 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10873 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10874 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10875 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10876 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10877 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10878 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10879 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10880 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10881 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10882 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10883 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10884 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10885 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10886 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10887 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10888 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10889 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10890 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10891 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10892 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10893 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10894 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10895 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10896 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10897 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10898 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10899 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10900 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10901 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10902 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10903 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10904 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10905 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10906 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10907 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10908 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10909 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10910 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10911 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10912 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10913 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10914 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10915 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10916 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10917 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10918 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10919 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10920 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10921 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10922 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10923 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10924 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10925 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10926 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10927 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10928 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10929 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10930 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10931 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10932 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10933 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10934 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10935 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10936 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10937 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10938 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10939 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10940 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10941 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10942 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10943 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10944 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10945 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10946 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10947 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10948 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10949 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10950 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10951 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10952 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10953 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10954 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10955 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10956 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10957 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10958 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10959 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10960 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10961 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10962 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10963 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10964 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10965 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10966 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10967 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10968 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10969 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10970 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10971 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10972 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10973 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10974 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10975 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10976 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10977 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10978 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10979 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10980 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10981 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10982 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10983 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10984 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10985 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10986 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10987 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10988 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10989 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10990 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10991 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10992 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10993 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10994 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10995 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10996 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10997 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10998 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 10999 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11000 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11001 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11002 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11003 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11004 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11005 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11006 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11007 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11008 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11009 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11010 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11011 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11012 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11013 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11014 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11015 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11016 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11017 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11018 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11019 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11020 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11021 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11022 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11023 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11024 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11025 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11026 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11027 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11028 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11029 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11030 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11031 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11032 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11033 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11034 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11035 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11036 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11037 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11038 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11039 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11040 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11041 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11042 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11043 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11044 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11045 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11046 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11047 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11048 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11049 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11050 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11051 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11052 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11053 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11054 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11055 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11056 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11057 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11058 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11059 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11060 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11061 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11062 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11063 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11064 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11065 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11066 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11067 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11068 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11069 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11070 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11071 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11072 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11073 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11074 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11075 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11076 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11077 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11078 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11079 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11080 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11081 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11082 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11083 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11084 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11085 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11086 | 2023-05-10 15:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11087 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11088 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11089 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11090 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11091 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11092 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11093 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11094 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11095 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11096 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11097 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 11098 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 11099 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11100 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11101 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11102 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11103 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11104 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11105 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11106 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11107 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11108 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11109 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11110 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11111 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11112 | 2023-05-10 15:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11113 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11114 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11115 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11116 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11117 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11118 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11119 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11120 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11121 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11122 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11123 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11124 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11125 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11126 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11127 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11128 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11129 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11130 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11131 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11132 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11133 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11134 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11135 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11136 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11137 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11138 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11139 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11140 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11141 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11142 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11143 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11144 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11145 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11146 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11147 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11148 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11149 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11150 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11151 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11152 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11153 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11154 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11155 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11156 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11157 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11158 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11159 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11160 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11161 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11162 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11163 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11164 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11165 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11166 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11167 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11168 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11169 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11170 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11171 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11172 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11173 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11174 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11175 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11176 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11177 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11178 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11179 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11180 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11181 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11182 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11183 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11184 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 11185 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 11186 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11187 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11188 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11189 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11190 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11191 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11192 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11193 | 2023-05-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11194 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11195 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11196 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 11197 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 11198 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11199 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11200 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11201 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11202 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11203 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11204 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 11205 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 11206 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11207 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11208 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11209 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11210 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 11211 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 11212 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11213 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11214 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11215 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11216 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 11217 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11218 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11219 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11220 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11221 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11222 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11223 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11224 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11225 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11226 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11227 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11228 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11229 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11230 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11231 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11232 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11233 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11234 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11235 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11236 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11237 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11238 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11239 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11240 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11241 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11242 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11243 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11244 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11245 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11246 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11247 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11248 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11249 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11250 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11251 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11252 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11253 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11254 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11255 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11256 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11257 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11258 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11259 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11260 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11261 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11262 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11263 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11264 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11265 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11266 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11267 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11268 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11269 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11270 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11271 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11272 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11273 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11274 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11275 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11276 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11277 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11278 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11279 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11280 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11281 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11282 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11283 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11284 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11285 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11286 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11287 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11288 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11289 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11290 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11291 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11292 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11293 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11294 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11295 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11296 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11297 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11298 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11299 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11300 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11301 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11302 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11303 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11304 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11305 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11306 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11307 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11308 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11309 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11310 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11311 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11312 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11313 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11314 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11315 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11316 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11317 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11318 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11319 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11320 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11321 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11322 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11323 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11324 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11325 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11326 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11327 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11328 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11329 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11330 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11331 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11332 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11333 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11334 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11335 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11336 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11337 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11338 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11339 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11340 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11341 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11342 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11343 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11344 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11345 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11346 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11347 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11348 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11349 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11350 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11351 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11352 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11353 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11354 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11355 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11356 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11357 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11358 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11359 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11360 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11361 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11362 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11363 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11364 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11365 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11366 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11367 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11368 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11369 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11370 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11371 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11372 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11373 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11374 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11375 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11376 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11377 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11378 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11379 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11380 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11381 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11382 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11383 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11384 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11385 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11386 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11387 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11388 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11389 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11390 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11391 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11392 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11393 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11394 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11395 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11396 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11397 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11398 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11399 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11400 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11401 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11402 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11403 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11404 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11405 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11406 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11407 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11408 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11409 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11410 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11411 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11412 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11413 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11414 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11415 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11416 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11417 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11418 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11419 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11420 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11421 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11422 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11423 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11424 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11425 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11426 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11427 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11428 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11429 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11430 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11431 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11432 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11433 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11434 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11435 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11436 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11437 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11438 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11439 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11440 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11441 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11442 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11443 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11444 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11445 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11446 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11447 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11448 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11449 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11450 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11451 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11452 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11453 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11454 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11455 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11456 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11457 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11458 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11459 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11460 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11461 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11462 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11463 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11464 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11465 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11466 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11467 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11468 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11469 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11470 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11471 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11472 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11473 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11474 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11475 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11476 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11477 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11478 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11479 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11480 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11481 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11482 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11483 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11484 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11485 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11486 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11487 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11488 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11489 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11490 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11491 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11492 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11493 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11494 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11495 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11496 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11497 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11498 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11499 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11500 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11501 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11502 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11503 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11504 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11505 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11506 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11507 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11508 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11509 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11510 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11511 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11512 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11513 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11514 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11515 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11516 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11517 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11518 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11519 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11520 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11521 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11522 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11523 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11524 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11525 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11526 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11527 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11528 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11529 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11530 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11531 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11532 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11533 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11534 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11535 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11536 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11537 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11538 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11539 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11540 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11541 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11542 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11543 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11544 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11545 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11546 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11547 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11548 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11549 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11550 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11551 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11552 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11553 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11554 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11555 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11556 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11557 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11558 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11559 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11560 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11561 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11562 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11563 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11564 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11565 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11566 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11567 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11568 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11569 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11570 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11571 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11572 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11573 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11574 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11575 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11576 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11577 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11578 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11579 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11580 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11581 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11582 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11583 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11584 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11585 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11586 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11587 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11588 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11589 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11590 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11591 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11592 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11593 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11594 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11595 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11596 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11597 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11598 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11599 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11600 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11601 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11602 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11603 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11604 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11605 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11606 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11607 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11608 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11609 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11610 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11611 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11612 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11613 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11614 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11615 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11616 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11617 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11618 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11619 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11620 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11621 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11622 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11623 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11624 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11625 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11626 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11627 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11628 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11629 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11630 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11631 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11632 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11633 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11634 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11635 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11636 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11637 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11638 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11639 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11640 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11641 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11642 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11643 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11644 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11645 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11646 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11647 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11648 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11649 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11650 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11651 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11652 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11653 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11654 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11655 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11656 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11657 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11658 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11659 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11660 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11661 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11662 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11663 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11664 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11665 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11666 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11667 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11668 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11669 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11670 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11671 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11672 | 2023-05-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11673 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11674 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11675 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11676 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11677 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11678 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11679 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11680 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11681 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11682 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11683 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11684 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11685 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11686 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11687 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11688 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11689 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11690 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11691 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11692 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11693 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11694 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11695 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11696 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11697 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11698 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11699 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11700 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11701 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11702 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11703 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11704 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11705 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11706 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11707 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11708 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11709 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11710 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11711 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11712 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11713 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11714 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11715 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11716 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11717 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11718 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11719 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11720 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11721 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11722 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11723 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11724 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11725 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11726 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11727 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11728 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11729 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11730 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11731 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11732 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11733 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11734 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11735 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11736 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11737 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11738 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11739 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11740 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11741 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11742 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11743 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11744 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11745 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11746 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11747 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11748 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11749 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11750 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11751 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11752 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11753 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11754 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11755 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11756 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11757 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11758 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11759 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11760 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11761 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11762 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11763 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11764 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11765 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11766 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11767 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11768 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11769 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11770 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11771 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11772 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11773 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11774 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11775 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11776 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11777 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11778 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11779 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11780 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11781 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11782 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11783 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11784 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11785 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11786 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11787 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11788 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11789 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11790 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11791 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11792 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11793 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11794 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11795 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11796 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11797 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11798 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11799 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11800 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11801 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11802 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11803 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11804 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11805 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11806 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11807 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11808 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11809 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11810 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11811 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11812 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11813 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11814 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11815 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11816 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11817 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11818 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11819 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11820 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11821 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11822 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11823 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11824 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11825 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11826 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11827 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11828 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11829 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11830 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11831 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11832 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11833 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11834 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11835 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11836 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11837 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11838 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11839 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11840 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11841 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11842 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11843 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11844 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11845 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11846 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11847 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11848 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11849 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11850 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11851 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11852 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11853 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11854 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11855 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11856 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11857 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11858 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11859 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11860 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11861 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11862 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11863 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11864 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11865 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11866 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11867 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11868 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11869 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11870 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11871 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11872 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11873 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11874 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11875 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11876 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11877 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11878 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11879 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11880 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11881 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11882 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11883 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11884 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11885 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11886 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11887 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11888 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11889 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11890 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11891 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11892 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11893 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11894 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11895 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11896 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11897 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11898 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11899 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11900 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11901 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11902 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11903 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11904 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11905 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11906 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11907 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11908 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11909 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11910 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11911 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11912 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11913 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11914 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11915 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11916 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11917 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11918 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11919 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11920 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11921 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11922 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11923 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11924 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11925 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11926 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11927 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11928 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11929 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11930 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11931 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11932 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11933 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11934 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11935 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11936 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11937 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11938 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11939 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11940 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11941 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11942 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11943 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11944 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11945 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11946 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11947 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11948 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11949 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11950 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11951 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11952 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11953 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11954 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11955 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11956 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11957 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11958 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11959 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11960 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11961 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11962 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11963 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11964 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11965 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11966 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11967 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11968 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11969 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11970 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11971 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11972 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11973 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11974 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11975 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11976 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11977 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11978 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11979 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11980 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11981 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11982 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11983 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11984 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11985 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 11986 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 11987 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 11988 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 11989 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11990 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11991 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11992 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 11993 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 11994 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 11995 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5FBBBA4||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 11996 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5FB8444||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 11997 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5FB8501||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 11998 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5FBC061||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 11999 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5FBBBA4||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12000 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5FBC061| Linked Logon ID: 0x5FBBBA4| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12001 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5FBBBA4| Linked Logon ID: 0x5FBC061| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12002 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 12003 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 12004 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 12005 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 12006 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5FB8444||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12007 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5FB8501| Linked Logon ID: 0x5FB8444| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12008 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5FB8444| Linked Logon ID: 0x5FB8501| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12009 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 12010 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 12011 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 12012 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 12013 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12014 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12015 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12016 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12017 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12018 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12019 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12020 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12021 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12022 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12023 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12024 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12025 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12026 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12027 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12028 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12029 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12030 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12031 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12032 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12033 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12034 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12035 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12036 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12037 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12038 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12039 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12040 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12041 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12042 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12043 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12044 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12045 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12046 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12047 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12048 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12049 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12050 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12051 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12052 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12053 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12054 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12055 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12056 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12057 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12058 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12059 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12060 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12061 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12062 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12063 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12064 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12065 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12066 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12067 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12068 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12069 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12070 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12071 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12072 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12073 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12074 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12075 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12076 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12077 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12078 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12079 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12080 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12081 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12082 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12083 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12084 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12085 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12086 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12087 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12088 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12089 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12090 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12091 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12092 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12093 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12094 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12095 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12096 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12097 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12098 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12099 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12100 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12101 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12102 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12103 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12104 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12105 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12106 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12107 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12108 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12109 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12110 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12111 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12112 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12113 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12114 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12115 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12116 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12117 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12118 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12119 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12120 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12121 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12122 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12123 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12124 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12125 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12126 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12127 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12128 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12129 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12130 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12131 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12132 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12133 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12134 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12135 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12136 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12137 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12138 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12139 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4799 | Security Group Management | A security-enabled local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Group:| Security ID: BUILTIN\Administrators| Group Name: Administrators| Group Domain: Builtin||Process Information:| Process ID: 0x6cc0| Process Name: C:\Windows\System32\svchost.exe |
| 12140 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x840| Process Name: C:\Windows\System32\LogonUI.exe |
| 12141 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12142 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12143 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12144 | 2023-05-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12145 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12146 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12147 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12148 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12149 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12150 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12151 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12152 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12153 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12154 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12155 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12156 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12157 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12158 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12159 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12160 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12161 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12162 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12163 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12164 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12165 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12166 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12167 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12168 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12169 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12170 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12171 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12172 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12173 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12174 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12175 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12176 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12177 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12178 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12179 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12180 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12181 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12182 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12183 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12184 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12185 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12186 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12187 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12188 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12189 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12190 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12191 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12192 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12193 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12194 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12195 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12196 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12197 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12198 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12199 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12200 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12201 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12202 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12203 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12204 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12205 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12206 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12207 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12208 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12209 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12210 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12211 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12212 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12213 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12214 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12215 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12216 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12217 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12218 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12219 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12220 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12221 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12222 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12223 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12224 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12225 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12226 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12227 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12228 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12229 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12230 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12231 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12232 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12233 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12234 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12235 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12236 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12237 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12238 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12239 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12240 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12241 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12242 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12243 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12244 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12245 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12246 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12247 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12248 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12249 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12250 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12251 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12252 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12253 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12254 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12255 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12256 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12257 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12258 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12259 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12260 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12261 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12262 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12263 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12264 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12265 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12266 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12267 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12268 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12269 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12270 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12271 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12272 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12273 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12274 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12275 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12276 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12277 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12278 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12279 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12280 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12281 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12282 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12283 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12284 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12285 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12286 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12287 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12288 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12289 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12290 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12291 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12292 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12293 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12294 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12295 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12296 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12297 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12298 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12299 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12300 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12301 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12302 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12303 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12304 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12305 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12306 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12307 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12308 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12309 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12310 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12311 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12312 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12313 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12314 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12315 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12316 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12317 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12318 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12319 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12320 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12321 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12322 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12323 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12324 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12325 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12326 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12327 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12328 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12329 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12330 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12331 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12332 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12333 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12334 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12335 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12336 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12337 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12338 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12339 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12340 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12341 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12342 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12343 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12344 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12345 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12346 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12347 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12348 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12349 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12350 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12351 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12352 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12353 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12354 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12355 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12356 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12357 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12358 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12359 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12360 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12361 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12362 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12363 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12364 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12365 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12366 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12367 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12368 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12369 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12370 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12371 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12372 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12373 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12374 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12375 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12376 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12377 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12378 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12379 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12380 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12381 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12382 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12383 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12384 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12385 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12386 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12387 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12388 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12389 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12390 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12391 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12392 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12393 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12394 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12395 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12396 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12397 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12398 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12399 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12400 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12401 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12402 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12403 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12404 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12405 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12406 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12407 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12408 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12409 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12410 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12411 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12412 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12413 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12414 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12415 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12416 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12417 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12418 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12419 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12420 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12421 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12422 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12423 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12424 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12425 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12426 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12427 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12428 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12429 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12430 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_api.application| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12431 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_office.net| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12432 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12433 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12434 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12435 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12436 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12437 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12438 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12439 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12440 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12441 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12442 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12443 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12444 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12445 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12446 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12447 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12448 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12449 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12450 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12451 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12452 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12453 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12454 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12455 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12456 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12457 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12458 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12459 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12460 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12461 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12462 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12463 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12464 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12465 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12466 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12467 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12468 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12469 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12470 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12471 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12472 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12473 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12474 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12475 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12476 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12477 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12478 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12479 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12480 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12481 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12482 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12483 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12484 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12485 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12486 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12487 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12488 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12489 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12490 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12491 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12492 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12493 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12494 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12495 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12496 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12497 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12498 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12499 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12500 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12501 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12502 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12503 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12504 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12505 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12506 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12507 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12508 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12509 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12510 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12511 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12512 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12513 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12514 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12515 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12516 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12517 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12518 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12519 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12520 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12521 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12522 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12523 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12524 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12525 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12526 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12527 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12528 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12529 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12530 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12531 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12532 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12533 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12534 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12535 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12536 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12537 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12538 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12539 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12540 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12541 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12542 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12543 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12544 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12545 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12546 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12547 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12548 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12549 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12550 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12551 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12552 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12553 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12554 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12555 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12556 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12557 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12558 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12559 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12560 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12561 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12562 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12563 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12564 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12565 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12566 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12567 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12568 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12569 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12570 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12571 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12572 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12573 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12574 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12575 | 2023-05-10 02:13:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12576 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12577 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12578 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12579 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12580 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12581 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12582 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12583 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12584 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12585 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12586 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12587 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12588 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12589 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 12590 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12591 | 2023-04-10 22:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12592 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12593 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12594 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12595 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12596 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12597 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12598 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12599 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12600 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12601 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12602 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12603 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12604 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12605 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12606 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12607 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12608 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12609 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12610 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6e30| Process Name: C:\Windows\System32\taskhostw.exe |
| 12611 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12612 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12613 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12614 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12615 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12616 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12617 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12618 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12619 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12620 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12621 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12622 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12623 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12624 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12625 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12626 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12627 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12628 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12629 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12630 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12631 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12632 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12633 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12634 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12635 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12636 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12637 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12638 | 2023-04-10 22:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12639 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x840| Process Name: C:\Windows\System32\LogonUI.exe |
| 12640 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12641 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12642 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12643 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12644 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12645 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12646 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12647 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12648 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12649 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12650 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12651 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12652 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12653 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12654 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12655 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12656 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12657 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12658 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12659 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12660 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12661 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12662 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12663 | 2023-04-10 22:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12664 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12665 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12666 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12667 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12668 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12669 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12670 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12671 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12672 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12673 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12674 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12675 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12676 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12677 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12678 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12679 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12680 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12681 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12682 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12683 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12684 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12685 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12686 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12687 | 2023-04-10 22:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12688 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12689 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12690 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12691 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12692 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12693 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12694 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12695 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12696 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12697 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12698 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12699 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12700 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12701 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12702 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12703 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12704 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12705 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12706 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12707 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12708 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12709 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12710 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12711 | 2023-04-10 22:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12712 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12713 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12714 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12715 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12716 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12717 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12718 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12719 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12720 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12721 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12722 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12723 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12724 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12725 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12726 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12727 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12728 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12729 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12730 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12731 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12732 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12733 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12734 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12735 | 2023-04-10 22:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12736 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12737 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12738 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12739 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12740 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12741 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12742 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12743 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12744 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12745 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12746 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12747 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12748 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12749 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12750 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12751 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12752 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12753 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12754 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12755 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12756 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12757 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12758 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12759 | 2023-04-10 22:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12760 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12761 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12762 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12763 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12764 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12765 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12766 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12767 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12768 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12769 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12770 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12771 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12772 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12773 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12774 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12775 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12776 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12777 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12778 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12779 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12780 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12781 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12782 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12783 | 2023-04-10 22:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12784 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12785 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12786 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12787 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12788 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12789 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12790 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12791 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12792 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12793 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12794 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12795 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12796 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12797 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12798 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12799 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12800 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12801 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12802 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12803 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12804 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12805 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12806 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12807 | 2023-04-10 22:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12808 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12809 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12810 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12811 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12812 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12813 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12814 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12815 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12816 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12817 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12818 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12819 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12820 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12821 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12822 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12823 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12824 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12825 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12826 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12827 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12828 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12829 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12830 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12831 | 2023-04-10 22:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12832 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12833 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12834 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12835 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12836 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12837 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12838 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12839 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12840 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12841 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12842 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12843 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12844 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12845 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12846 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12847 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12848 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12849 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12850 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12851 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12852 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12853 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12854 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12855 | 2023-04-10 22:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12856 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12857 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12858 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12859 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12860 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12861 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12862 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12863 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12864 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12865 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12866 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12867 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12868 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12869 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12870 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12871 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12872 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12873 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12874 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12875 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12876 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12877 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12878 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12879 | 2023-04-10 22:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12880 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12881 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12882 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12883 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12884 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12885 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12886 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12887 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12888 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12889 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12890 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12891 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12892 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12893 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12894 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12895 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12896 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12897 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12898 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12899 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12900 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12901 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12902 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12903 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12904 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12905 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12906 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12907 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12908 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12909 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12910 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12911 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12912 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12913 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 12914 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 12915 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 12916 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12917 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12918 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12919 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12920 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12921 | 2023-04-10 22:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12922 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12923 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12924 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12925 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12926 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12927 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12928 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12929 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12930 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12931 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12932 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12933 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12934 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12935 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12936 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12937 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12938 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12939 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12940 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12941 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12942 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12943 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12944 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12945 | 2023-04-10 22:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12946 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12947 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12948 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12949 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12950 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12951 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12952 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12953 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12954 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12955 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12956 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12957 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12958 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12959 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12960 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12961 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12962 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12963 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12964 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12965 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12966 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12967 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12968 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12969 | 2023-04-10 21:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12970 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12971 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12972 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12973 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12974 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12975 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12976 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12977 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12978 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12979 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12980 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12981 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12982 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12983 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12984 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12985 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12986 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12987 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12988 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12989 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12990 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12991 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12992 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12993 | 2023-04-10 21:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12994 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12995 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12996 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12997 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 12998 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 12999 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13000 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13001 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13002 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13003 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13004 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13005 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13006 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13007 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13008 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13009 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13010 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13011 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13012 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13013 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13014 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13015 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13016 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13017 | 2023-04-10 21:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13018 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13019 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13020 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13021 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13022 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13023 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13024 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13025 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13026 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13027 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13028 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13029 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13030 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13031 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13032 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13033 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13034 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13035 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13036 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13037 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13038 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13039 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13040 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13041 | 2023-04-10 21:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13042 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13043 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13044 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13045 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13046 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13047 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13048 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13049 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13050 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13051 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13052 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13053 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13054 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13055 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13056 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13057 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13058 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13059 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13060 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13061 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13062 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13063 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13064 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13065 | 2023-04-10 21:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13066 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13067 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13068 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13069 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13070 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13071 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13072 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13073 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13074 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13075 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13076 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13077 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13078 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13079 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13080 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13081 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13082 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13083 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13084 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13085 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13086 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13087 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13088 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13089 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13090 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13091 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13092 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13093 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13094 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13095 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13096 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13097 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13098 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13099 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13100 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13101 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13102 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13103 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13104 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13105 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13106 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13107 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13108 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13109 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13110 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13111 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13112 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13113 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13114 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13115 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13116 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13117 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13118 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13119 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13120 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13121 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13122 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13123 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13124 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13125 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13126 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13127 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13128 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13129 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13130 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13131 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13132 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13133 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13134 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13135 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13136 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13137 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13138 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13139 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13140 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13141 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13142 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13143 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13144 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13145 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13146 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13147 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13148 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13149 | 2023-04-10 21:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13150 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13151 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13152 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13153 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13154 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13155 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13156 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13157 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13158 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13159 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13160 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13161 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13162 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13163 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13164 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13165 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13166 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13167 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13168 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13169 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13170 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13171 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13172 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13173 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13174 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13175 | 2023-04-10 21:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13176 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13177 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13178 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13179 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13180 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13181 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13182 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13183 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13184 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13185 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13186 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13187 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13188 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13189 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13190 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13191 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13192 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13193 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13194 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13195 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13196 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13197 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13198 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13199 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13200 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13201 | 2023-04-10 21:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13202 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13203 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13204 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13205 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13206 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13207 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13208 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13209 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13210 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13211 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13212 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13213 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13214 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13215 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13216 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13217 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13218 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13219 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13220 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13221 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13222 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13223 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13224 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13225 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13226 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13227 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13228 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13229 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13230 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13231 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13232 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13233 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13234 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13235 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13236 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13237 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13238 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13239 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13240 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13241 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13242 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13243 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13244 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13245 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13246 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13247 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13248 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13249 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13250 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13251 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13252 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13253 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13254 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13255 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13256 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13257 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13258 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13259 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13260 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13261 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13262 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13263 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13264 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13265 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13266 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13267 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13268 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13269 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13270 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13271 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13272 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13273 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13274 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13275 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13276 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13277 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13278 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13279 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13280 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13281 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13282 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13283 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13284 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13285 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13286 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13287 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13288 | 2023-04-10 21:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13289 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13290 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13291 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13292 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13293 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13294 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13295 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13296 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13297 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13298 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13299 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13300 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13301 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13302 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13303 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13304 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13305 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13306 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13307 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13308 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13309 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13310 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13311 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13312 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13313 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13314 | 2023-04-10 21:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13315 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13316 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13317 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13318 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13319 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13320 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13321 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13322 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13323 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13324 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13325 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13326 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13327 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13328 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13329 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 13330 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13331 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13332 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13333 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13334 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13335 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13336 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13337 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13338 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13339 | 2023-04-10 21:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13340 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13341 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13342 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13343 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13344 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13345 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13346 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13347 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13348 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13349 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13350 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13351 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13352 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13353 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13354 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13355 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13356 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13357 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13358 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13359 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13360 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13361 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13362 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13363 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13364 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13365 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13366 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13367 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13368 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13369 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13370 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13371 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13372 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13373 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13374 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13375 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13376 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13377 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13378 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13379 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13380 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13381 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13382 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13383 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13384 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13385 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13386 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13387 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13388 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13389 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13390 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13391 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13392 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13393 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13394 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13395 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13396 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13397 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13398 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13399 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13400 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13401 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13402 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13403 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13404 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13405 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13406 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13407 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13408 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13409 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13410 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13411 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13412 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13413 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13414 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13415 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13416 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13417 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13418 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13419 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13420 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13421 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13422 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13423 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13424 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13425 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13426 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13427 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13428 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13429 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13430 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13431 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13432 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13433 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13434 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13435 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13436 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13437 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13438 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13439 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13440 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13441 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13442 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13443 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13444 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13445 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13446 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13447 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13448 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13449 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13450 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13451 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13452 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13453 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13454 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13455 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13456 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13457 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13458 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13459 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13460 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13461 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13462 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13463 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13464 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13465 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13466 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13467 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13468 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13469 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13470 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13471 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13472 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13473 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13474 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13475 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13476 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13477 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13478 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13479 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13480 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13481 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13482 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13483 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13484 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13485 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13486 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13487 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13488 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13489 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13490 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13491 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13492 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13493 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13494 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13495 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13496 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13497 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13498 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13499 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13500 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13501 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13502 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13503 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13504 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13505 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13506 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13507 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13508 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13509 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13510 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13511 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13512 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13513 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13514 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13515 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13516 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13517 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13518 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13519 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13520 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13521 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13522 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13523 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13524 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13525 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13526 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13527 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13528 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13529 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13530 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13531 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13532 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13533 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13534 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13535 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13536 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13537 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13538 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13539 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13540 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13541 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13542 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13543 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13544 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13545 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13546 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13547 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13548 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13549 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13550 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13551 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13552 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13553 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13554 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13555 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13556 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13557 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13558 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13559 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13560 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13561 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13562 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13563 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13564 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13565 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13566 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13567 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13568 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13569 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13570 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13571 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13572 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13573 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13574 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13575 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13576 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13577 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13578 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13579 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13580 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13581 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13582 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13583 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13584 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13585 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13586 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13587 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13588 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13589 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13590 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13591 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13592 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13593 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13594 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13595 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13596 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13597 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13598 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13599 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13600 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13601 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13602 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13603 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13604 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13605 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13606 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13607 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13608 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13609 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13610 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13611 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13612 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13613 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13614 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13615 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13616 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13617 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13618 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13619 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13620 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13621 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13622 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13623 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13624 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13625 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13626 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13627 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13628 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13629 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13630 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13631 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13632 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13633 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13634 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13635 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13636 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13637 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13638 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13639 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13640 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13641 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13642 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13643 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13644 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13645 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13646 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13647 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13648 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13649 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13650 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13651 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13652 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13653 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13654 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13655 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13656 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13657 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13658 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13659 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13660 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13661 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13662 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13663 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13664 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13665 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13666 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13667 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13668 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13669 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13670 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13671 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13672 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13673 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13674 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13675 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13676 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13677 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13678 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13679 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13680 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13681 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13682 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13683 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13684 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13685 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13686 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13687 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13688 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13689 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13690 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13691 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13692 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13693 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13694 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13695 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13696 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13697 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13698 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13699 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13700 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13701 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13702 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13703 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13704 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13705 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13706 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13707 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13708 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13709 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13710 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13711 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13712 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13713 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13714 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13715 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13716 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13717 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13718 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13719 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13720 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13721 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13722 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13723 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13724 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13725 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13726 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13727 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13728 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13729 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13730 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13731 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13732 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13733 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13734 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13735 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13736 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13737 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13738 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13739 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13740 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13741 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13742 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13743 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13744 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13745 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13746 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13747 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13748 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13749 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13750 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13751 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13752 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13753 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13754 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13755 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13756 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13757 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13758 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13759 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13760 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13761 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13762 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13763 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13764 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13765 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13766 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13767 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13768 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13769 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13770 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13771 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13772 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13773 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13774 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13775 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13776 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13777 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13778 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13779 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13780 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13781 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13782 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13783 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13784 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13785 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13786 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13787 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13788 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13789 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13790 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13791 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13792 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13793 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13794 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13795 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13796 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13797 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13798 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13799 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13800 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13801 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13802 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13803 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13804 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13805 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13806 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13807 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13808 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13809 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13810 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13811 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13812 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13813 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13814 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13815 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13816 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13817 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13818 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13819 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13820 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13821 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13822 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13823 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13824 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13825 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13826 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13827 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13828 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13829 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13830 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13831 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13832 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13833 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13834 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13835 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13836 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13837 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13838 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13839 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13840 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13841 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13842 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x52F67B7||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 13843 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5306FD4||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 13844 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x52F68D4||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 13845 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x53070BB||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 13846 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5306FD4||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13847 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x53070BB| Linked Logon ID: 0x5306FD4| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13848 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5306FD4| Linked Logon ID: 0x53070BB| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13849 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 13850 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 13851 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 13852 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 13853 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x52F67B7||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13854 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x52F68D4| Linked Logon ID: 0x52F67B7| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13855 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x52F67B7| Linked Logon ID: 0x52F68D4| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13856 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 13857 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 13858 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 13859 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 13860 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13861 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13862 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13863 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13864 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13865 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13866 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13867 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13868 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13869 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13870 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13871 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13872 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13873 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13874 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13875 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13876 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13877 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13878 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13879 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13880 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13881 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13882 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13883 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13884 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13885 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13886 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13887 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13888 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13889 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13890 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13891 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13892 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13893 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13894 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13895 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13896 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13897 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13898 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5f90| Process Name: C:\Windows\System32\LogonUI.exe |
| 13899 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13900 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13901 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13902 | 2023-04-10 21:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13903 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13904 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13905 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13906 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13907 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13908 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13909 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13910 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13911 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13912 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13913 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13914 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13915 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13916 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13917 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13918 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13919 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13920 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13921 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13922 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13923 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13924 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13925 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13926 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13927 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13928 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13929 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13930 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13931 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13932 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13933 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13934 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13935 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13936 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13937 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13938 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13939 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13940 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13941 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13942 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13943 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13944 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13945 | 2023-04-10 19:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13946 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13947 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13948 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13949 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13950 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13951 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13952 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13953 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13954 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13955 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13956 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13957 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13958 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13959 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13960 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13961 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13962 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13963 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13964 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13965 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13966 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13967 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13968 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13969 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 13970 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13971 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13972 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13973 | 2023-04-10 15:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13974 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 13975 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 13976 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13977 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13978 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13979 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13980 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13981 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13982 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13983 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13984 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13985 | 2023-04-10 15:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13986 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13987 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13988 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13989 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13990 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13991 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13992 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13993 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13994 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13995 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13996 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13997 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 13998 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 13999 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14000 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14001 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14002 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14003 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14004 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14005 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14006 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14007 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14008 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14009 | 2023-04-10 15:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14010 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14011 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14012 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14013 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14014 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14015 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14016 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14017 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14018 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14019 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14020 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14021 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14022 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14023 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14024 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14025 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14026 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14027 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14028 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14029 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14030 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14031 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14032 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14033 | 2023-04-10 15:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14034 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14035 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14036 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14037 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14038 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14039 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14040 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14041 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14042 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14043 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14044 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14045 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14046 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14047 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14048 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14049 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14050 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14051 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14052 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14053 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14054 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14055 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14056 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14057 | 2023-04-10 15:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14058 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14059 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14060 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14061 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14062 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14063 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14064 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14065 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14066 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14067 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14068 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14069 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14070 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14071 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14072 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14073 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14074 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14075 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14076 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14077 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14078 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14079 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14080 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14081 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14082 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14083 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14084 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14085 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14086 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14087 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14088 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14089 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14090 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14091 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14092 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14093 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14094 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14095 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14096 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14097 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14098 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14099 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14100 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14101 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14102 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14103 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14104 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14105 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14106 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14107 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14108 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14109 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14110 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14111 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14112 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14113 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14114 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14115 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14116 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14117 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14118 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14119 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14120 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14121 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14122 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14123 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14124 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14125 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14126 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14127 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14128 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14129 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14130 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14131 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14132 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14133 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14134 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14135 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14136 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14137 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14138 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14139 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14140 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14141 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14142 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14143 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14144 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14145 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14146 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14147 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14148 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14149 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14150 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14151 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14152 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14153 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14154 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14155 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14156 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14157 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14158 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14159 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14160 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14161 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14162 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14163 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14164 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14165 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14166 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14167 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14168 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14169 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14170 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14171 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14172 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14173 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14174 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14175 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14176 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14177 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14178 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14179 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14180 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14181 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14182 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14183 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14184 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14185 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14186 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14187 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14188 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14189 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14190 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14191 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14192 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14193 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14194 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14195 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14196 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14197 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14198 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14199 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14200 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14201 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14202 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14203 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14204 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14205 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14206 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14207 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14208 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14209 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14210 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14211 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14212 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14213 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14214 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14215 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14216 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14217 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14218 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14219 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14220 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14221 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14222 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14223 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14224 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14225 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14226 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14227 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14228 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14229 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14230 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14231 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14232 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14233 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14234 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14235 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14236 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14237 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14238 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14239 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14240 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14241 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14242 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14243 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14244 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14245 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14246 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14247 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14248 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14249 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14250 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14251 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14252 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14253 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14254 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14255 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14256 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14257 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14258 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14259 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14260 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14261 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14262 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14263 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14264 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14265 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14266 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14267 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14268 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14269 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14270 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14271 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14272 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14273 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14274 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14275 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14276 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14277 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14278 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14279 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14280 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14281 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14282 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14283 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14284 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14285 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14286 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14287 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14288 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14289 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14290 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14291 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14292 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14293 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14294 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14295 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14296 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14297 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14298 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14299 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14300 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14301 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14302 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14303 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14304 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14305 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14306 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14307 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14308 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14309 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14310 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14311 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14312 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14313 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14314 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14315 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14316 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14317 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14318 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14319 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14320 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14321 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14322 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14323 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14324 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14325 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14326 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14327 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14328 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14329 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14330 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14331 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14332 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14333 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14334 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14335 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14336 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14337 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14338 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14339 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14340 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14341 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14342 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14343 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14344 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14345 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14346 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14347 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14348 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14349 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14350 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14351 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14352 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14353 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14354 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14355 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14356 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14357 | 2023-04-10 15:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14358 | 2023-04-10 15:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14359 | 2023-04-10 15:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14360 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14361 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14362 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14363 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14364 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14365 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14366 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14367 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14368 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14369 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14370 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14371 | 2023-04-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14372 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14373 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14374 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14375 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14376 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14377 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14378 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14379 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14380 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14381 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14382 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14383 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14384 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14385 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14386 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14387 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14388 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14389 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14390 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14391 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14392 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14393 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14394 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14395 | 2023-04-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14396 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14397 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14398 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14399 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14400 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14401 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14402 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14403 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14404 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14405 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14406 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14407 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14408 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14409 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14410 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14411 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14412 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14413 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14414 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14415 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14416 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14417 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14418 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14419 | 2023-04-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14420 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14421 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14422 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14423 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14424 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14425 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14426 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14427 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14428 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14429 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14430 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14431 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14432 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14433 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14434 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14435 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14436 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14437 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14438 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14439 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14440 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14441 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14442 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14443 | 2023-04-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14444 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14445 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14446 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14447 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14448 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14449 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14450 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14451 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14452 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14453 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14454 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14455 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14456 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14457 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14458 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14459 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14460 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5f90| Process Name: C:\Windows\System32\LogonUI.exe |
| 14461 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14462 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14463 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14464 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14465 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14466 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14467 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14468 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14469 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14470 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14471 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14472 | 2023-04-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14473 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14474 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14475 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14476 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14477 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14478 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14479 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14480 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14481 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14482 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14483 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14484 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14485 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14486 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14487 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14488 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14489 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14490 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14491 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14492 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14493 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14494 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14495 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14496 | 2023-04-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14497 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14498 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14499 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14500 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14501 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14502 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14503 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14504 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14505 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14506 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14507 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14508 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14509 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14510 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14511 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14512 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14513 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14514 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14515 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14516 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14517 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14518 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14519 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14520 | 2023-04-10 15:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14521 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14522 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14523 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14524 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14525 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14526 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14527 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14528 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14529 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14530 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14531 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14532 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14533 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14534 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14535 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14536 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14537 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14538 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14539 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14540 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14541 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14542 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14543 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14544 | 2023-04-10 15:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14545 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14546 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14547 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14548 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14549 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14550 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14551 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14552 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14553 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14554 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14555 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14556 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14557 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14558 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14559 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14560 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14561 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 14562 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14563 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14564 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14565 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14566 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14567 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14568 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14569 | 2023-04-10 14:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14570 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14571 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14572 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14573 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14574 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14575 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14576 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14577 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14578 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14579 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14580 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14581 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14582 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14583 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14584 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14585 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14586 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14587 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14588 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14589 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14590 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14591 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14592 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14593 | 2023-04-10 14:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14594 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14595 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14596 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14597 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14598 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14599 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14600 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14601 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14602 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14603 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14604 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14605 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14606 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14607 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14608 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14609 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14610 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14611 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14612 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14613 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14614 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14615 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14616 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14617 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14618 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14619 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14620 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14621 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14622 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14623 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14624 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14625 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14626 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14627 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14628 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14629 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14630 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14631 | 2023-04-10 14:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14632 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14633 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14634 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14635 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14636 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14637 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14638 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14639 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14640 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14641 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14642 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14643 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14644 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14645 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14646 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14647 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14648 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14649 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14650 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14651 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14652 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14653 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14654 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14655 | 2023-04-10 14:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14656 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14657 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14658 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14659 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14660 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14661 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14662 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14663 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14664 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14665 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14666 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14667 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14668 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14669 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14670 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14671 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14672 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14673 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14674 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14675 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14676 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14677 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14678 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14679 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14680 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14681 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14682 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14683 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14684 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14685 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14686 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14687 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14688 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14689 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14690 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14691 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14692 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14693 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14694 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14695 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14696 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14697 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14698 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14699 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14700 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14701 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14702 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14703 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14704 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14705 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14706 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14707 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14708 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14709 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14710 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14711 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14712 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14713 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14714 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14715 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14716 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14717 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14718 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14719 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14720 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14721 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14722 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14723 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14724 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14725 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14726 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14727 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14728 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14729 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14730 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14731 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14732 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14733 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14734 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14735 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14736 | 2023-04-10 14:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14737 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14738 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14739 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14740 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14741 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14742 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14743 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14744 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14745 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 14746 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 14747 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14748 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14749 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14750 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14751 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14752 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14753 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14754 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14755 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14756 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14757 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14758 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14759 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14760 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14761 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14762 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14763 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14764 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14765 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14766 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14767 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14768 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14769 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14770 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14771 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14772 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14773 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14774 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14775 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14776 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14777 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14778 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14779 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14780 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14781 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14782 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14783 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14784 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14785 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14786 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14787 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14788 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14789 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14790 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14791 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14792 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14793 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14794 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14795 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14796 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14797 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14798 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14799 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14800 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14801 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14802 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14803 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14804 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14805 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14806 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14807 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14808 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14809 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14810 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14811 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14812 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14813 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14814 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14815 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14816 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14817 | 2023-04-10 14:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14818 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14819 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14820 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14821 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14822 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14823 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14824 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14825 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14826 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14827 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14828 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14829 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14830 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14831 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14832 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14833 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14834 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14835 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14836 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14837 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14838 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14839 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14840 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14841 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14842 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14843 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14844 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14845 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14846 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14847 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14848 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14849 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14850 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14851 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14852 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14853 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14854 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14855 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14856 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14857 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14858 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14859 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14860 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14861 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14862 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14863 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14864 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14865 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14866 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14867 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14868 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14869 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14870 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14871 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14872 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14873 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14874 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14875 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14876 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14877 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14878 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14879 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14880 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14881 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14882 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14883 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14884 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14885 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14886 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14887 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14888 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14889 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14890 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14891 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14892 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14893 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14894 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14895 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14896 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14897 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14898 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14899 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14900 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14901 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14902 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14903 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14904 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14905 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14906 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14907 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14908 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14909 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14910 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14911 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14912 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14913 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14914 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14915 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14916 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14917 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14918 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14919 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14920 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14921 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14922 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14923 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14924 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14925 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14926 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14927 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14928 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14929 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14930 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14931 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14932 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14933 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14934 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14935 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14936 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14937 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14938 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14939 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14940 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14941 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14942 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14943 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14944 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14945 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14946 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14947 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14948 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14949 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14950 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14951 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14952 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14953 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14954 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14955 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14956 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14957 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14958 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14959 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14960 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14961 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14962 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14963 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14964 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14965 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14966 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14967 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14968 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14969 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14970 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14971 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14972 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14973 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14974 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14975 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14976 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14977 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14978 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14979 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14980 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14981 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14982 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14983 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 14984 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 14985 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14986 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14987 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14988 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14989 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14990 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14991 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14992 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14993 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14994 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14995 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14996 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14997 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14998 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 14999 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15000 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15001 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15002 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15003 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15004 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15005 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15006 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15007 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15008 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15009 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15010 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15011 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15012 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15013 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15014 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15015 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15016 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15017 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15018 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15019 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15020 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15021 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15022 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15023 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15024 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15025 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15026 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15027 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15028 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15029 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15030 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15031 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15032 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15033 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15034 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15035 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15036 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15037 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15038 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15039 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15040 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15041 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15042 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15043 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15044 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15045 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15046 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15047 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15048 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15049 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15050 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15051 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15052 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15053 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15054 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15055 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15056 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15057 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15058 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15059 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15060 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15061 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15062 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15063 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15064 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15065 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15066 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15067 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15068 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15069 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15070 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15071 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15072 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15073 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15074 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15075 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15076 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15077 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15078 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15079 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15080 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15081 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15082 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15083 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15084 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15085 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15086 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15087 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15088 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15089 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15090 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15091 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15092 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15093 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15094 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15095 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15096 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15097 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15098 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15099 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15100 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15101 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15102 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15103 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15104 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15105 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15106 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15107 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15108 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15109 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15110 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15111 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15112 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15113 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15114 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15115 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15116 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15117 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15118 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15119 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15120 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15121 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15122 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15123 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15124 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15125 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15126 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15127 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15128 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15129 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15130 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15131 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15132 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15133 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15134 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15135 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15136 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15137 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15138 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15139 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15140 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15141 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15142 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15143 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15144 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15145 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15146 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15147 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15148 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15149 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15150 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15151 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15152 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15153 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15154 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15155 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15156 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15157 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15158 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15159 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15160 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15161 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15162 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15163 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15164 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15165 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15166 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15167 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15168 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15169 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15170 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15171 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15172 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15173 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15174 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15175 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15176 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15177 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15178 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15179 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15180 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15181 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15182 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15183 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15184 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15185 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15186 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15187 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15188 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15189 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15190 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15191 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15192 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15193 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5023A6E||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 15194 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5024FEA||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 15195 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x5023B24||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 15196 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x50253DC||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 15197 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5024FEA||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15198 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x50253DC| Linked Logon ID: 0x5024FEA| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15199 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5024FEA| Linked Logon ID: 0x50253DC| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15200 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 15201 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 15202 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 15203 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 15204 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5023A6E||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15205 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5023B24| Linked Logon ID: 0x5023A6E| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15206 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x5023A6E| Linked Logon ID: 0x5023B24| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15207 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 15208 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 15209 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 15210 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 15211 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15212 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15213 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15214 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15215 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15216 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15217 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15218 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15219 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15220 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15221 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15222 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15223 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15224 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15225 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15226 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15227 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15228 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15229 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15230 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15231 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15232 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15233 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15234 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15235 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15236 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15237 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15238 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15239 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15240 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15241 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15242 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15243 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15244 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6f94| Process Name: C:\Windows\System32\LogonUI.exe |
| 15245 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15246 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15247 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15248 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15249 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15250 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15251 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15252 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15253 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15254 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15255 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15256 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15257 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15258 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15259 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15260 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15261 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15262 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15263 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15264 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15265 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15266 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15267 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15268 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15269 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15270 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15271 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15272 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15273 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15274 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15275 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15276 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15277 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15278 | 2023-04-10 14:53:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15279 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15280 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15281 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15282 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15283 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15284 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15285 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15286 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15287 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15288 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15289 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15290 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15291 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15292 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15293 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15294 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15295 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15296 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15297 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15298 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15299 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15300 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15301 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15302 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15303 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15304 | 2023-04-10 13:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15305 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15306 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15307 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15308 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15309 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15310 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15311 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15312 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15313 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15314 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15315 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15316 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15317 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15318 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15319 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15320 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15321 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15322 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15323 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15324 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15325 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15326 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15327 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15328 | 2023-04-10 13:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15329 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15330 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15331 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15332 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15333 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15334 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15335 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15336 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15337 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15338 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15339 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15340 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15341 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15342 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15343 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15344 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15345 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15346 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15347 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15348 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15349 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15350 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15351 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15352 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15353 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15354 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15355 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15356 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15357 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15358 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15359 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15360 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15361 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15362 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15363 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15364 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15365 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15366 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15367 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15368 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15369 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15370 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15371 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15372 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15373 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15374 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15375 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15376 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15377 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15378 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15379 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15380 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15381 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15382 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15383 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15384 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15385 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15386 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15387 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15388 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15389 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15390 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15391 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15392 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15393 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15394 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15395 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15396 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15397 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15398 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15399 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15400 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15401 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15402 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15403 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15404 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15405 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15406 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15407 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15408 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15409 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15410 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15411 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15412 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15413 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15414 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15415 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15416 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15417 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15418 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15419 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15420 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15421 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15422 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15423 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15424 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15425 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15426 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15427 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15428 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15429 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15430 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15431 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15432 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15433 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15434 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15435 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15436 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15437 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15438 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15439 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15440 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15441 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15442 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15443 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15444 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15445 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15446 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15447 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15448 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15449 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15450 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15451 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15452 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15453 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15454 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15455 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15456 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15457 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15458 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15459 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15460 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15461 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15462 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15463 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15464 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15465 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15466 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15467 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15468 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15469 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15470 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15471 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15472 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15473 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15474 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15475 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15476 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15477 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15478 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15479 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15480 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15481 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15482 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15483 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15484 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15485 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15486 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15487 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15488 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15489 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15490 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15491 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15492 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15493 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15494 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15495 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15496 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15497 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15498 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15499 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15500 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15501 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15502 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15503 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15504 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15505 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15506 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15507 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15508 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15509 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15510 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15511 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15512 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15513 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15514 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15515 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15516 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15517 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15518 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15519 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15520 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15521 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15522 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15523 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15524 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15525 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15526 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15527 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15528 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15529 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15530 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15531 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15532 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15533 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15534 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15535 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15536 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15537 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15538 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15539 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15540 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15541 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15542 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15543 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15544 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15545 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15546 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15547 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15548 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15549 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15550 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15551 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15552 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15553 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15554 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15555 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15556 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15557 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15558 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15559 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15560 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15561 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15562 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15563 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15564 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15565 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15566 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15567 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15568 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15569 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15570 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15571 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15572 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15573 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15574 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15575 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15576 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15577 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15578 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15579 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15580 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15581 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15582 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15583 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15584 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15585 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15586 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15587 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15588 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15589 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15590 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15591 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15592 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15593 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15594 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15595 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15596 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15597 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15598 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15599 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15600 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15601 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15602 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15603 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15604 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15605 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15606 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15607 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15608 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15609 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15610 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 15611 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15612 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15613 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15614 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15615 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15616 | 2023-04-10 13:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15617 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15618 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15619 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15620 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15621 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6f94| Process Name: C:\Windows\System32\LogonUI.exe |
| 15622 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15623 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15624 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15625 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15626 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15627 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15628 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15629 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15630 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15631 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15632 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15633 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15634 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15635 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15636 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15637 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15638 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15639 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15640 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15641 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15642 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15643 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15644 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15645 | 2023-04-10 13:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15646 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15647 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15648 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15649 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15650 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15651 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15652 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15653 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15654 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15655 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15656 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15657 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15658 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15659 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15660 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15661 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15662 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15663 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15664 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15665 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15666 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15667 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15668 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15669 | 2023-04-10 13:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15670 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15671 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15672 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15673 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15674 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15675 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15676 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15677 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15678 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15679 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15680 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15681 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15682 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15683 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15684 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15685 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15686 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15687 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15688 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15689 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15690 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15691 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15692 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15693 | 2023-04-10 13:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15694 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15695 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15696 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15697 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15698 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15699 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15700 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15701 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15702 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15703 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15704 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15705 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15706 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15707 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15708 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15709 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15710 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15711 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15712 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15713 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15714 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15715 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15716 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15717 | 2023-04-10 13:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15718 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15719 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15720 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15721 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15722 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15723 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15724 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15725 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15726 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15727 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15728 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15729 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15730 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15731 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15732 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15733 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15734 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15735 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15736 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15737 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15738 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15739 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15740 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15741 | 2023-04-10 13:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15742 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15743 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15744 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15745 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15746 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15747 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15748 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15749 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15750 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15751 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15752 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15753 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15754 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15755 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15756 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15757 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15758 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15759 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15760 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15761 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15762 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15763 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15764 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15765 | 2023-04-10 13:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15766 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15767 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15768 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15769 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15770 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15771 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15772 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15773 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15774 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15775 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15776 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15777 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15778 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15779 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15780 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15781 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15782 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15783 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15784 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15785 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15786 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15787 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15788 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15789 | 2023-04-10 13:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15790 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15791 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15792 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15793 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15794 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 15795 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 15796 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15797 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15798 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15799 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15800 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15801 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15802 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15803 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15804 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15805 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15806 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15807 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15808 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15809 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15810 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15811 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15812 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15813 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15814 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15815 | 2023-04-10 13:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15816 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15817 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15818 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15819 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15820 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15821 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15822 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15823 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15824 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15825 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15826 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15827 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15828 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15829 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15830 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15831 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15832 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15833 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15834 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15835 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15836 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15837 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15838 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15839 | 2023-04-10 13:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15840 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15841 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15842 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15843 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15844 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15845 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15846 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15847 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15848 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15849 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15850 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15851 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15852 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15853 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15854 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15855 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15856 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15857 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15858 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15859 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15860 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15861 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15862 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15863 | 2023-04-10 13:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15864 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15865 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15866 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15867 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15868 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15869 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15870 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15871 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15872 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15873 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15874 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15875 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15876 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15877 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15878 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15879 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15880 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15881 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15882 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15883 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15884 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15885 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15886 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15887 | 2023-04-10 13:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15888 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15889 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15890 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15891 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15892 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15893 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15894 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15895 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15896 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15897 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15898 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15899 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15900 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15901 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15902 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15903 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15904 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15905 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15906 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15907 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15908 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15909 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15910 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15911 | 2023-04-10 13:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15912 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15913 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15914 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15915 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15916 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15917 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15918 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15919 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15920 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15921 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15922 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15923 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15924 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15925 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15926 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15927 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15928 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15929 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15930 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15931 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15932 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15933 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15934 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15935 | 2023-04-10 13:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15936 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15937 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15938 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15939 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15940 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15941 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15942 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15943 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15944 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15945 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15946 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15947 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15948 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15949 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15950 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15951 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15952 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15953 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15954 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15955 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15956 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15957 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15958 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15959 | 2023-04-10 13:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15960 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15961 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15962 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15963 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15964 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15965 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15966 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15967 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15968 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15969 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15970 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15971 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15972 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15973 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15974 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15975 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15976 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15977 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15978 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15979 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15980 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15981 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15982 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15983 | 2023-04-10 13:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15984 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15985 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15986 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15987 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15988 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15989 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15990 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15991 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15992 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15993 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15994 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15995 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15996 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15997 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 15998 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 15999 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16000 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16001 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16002 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16003 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16004 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16005 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16006 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16007 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16008 | 2023-04-10 13:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16009 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16010 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16011 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16012 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16013 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16014 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16015 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16016 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16017 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16018 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16019 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16020 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16021 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16022 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16023 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16024 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16025 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16026 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16027 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16028 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16029 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16030 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16031 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16032 | 2023-04-10 13:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16033 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16034 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16035 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16036 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16037 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16038 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16039 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16040 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16041 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16042 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16043 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16044 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16045 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16046 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16047 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16048 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16049 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16050 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16051 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16052 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16053 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16054 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16055 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16056 | 2023-04-10 13:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16057 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16058 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16059 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16060 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16061 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16062 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16063 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16064 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16065 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16066 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16067 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16068 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16069 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16070 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16071 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16072 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16073 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16074 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16075 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16076 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16077 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16078 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16079 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16080 | 2023-04-10 13:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16081 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16082 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16083 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16084 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16085 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16086 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16087 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16088 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16089 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16090 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16091 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16092 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16093 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16094 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16095 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16096 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16097 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16098 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16099 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16100 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16101 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16102 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16103 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16104 | 2023-04-10 13:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16105 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16106 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16107 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16108 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16109 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16110 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16111 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16112 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16113 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16114 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16115 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16116 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16117 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16118 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16119 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16120 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16121 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16122 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16123 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16124 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16125 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_api.application| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16126 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_office.net| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16127 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16128 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16129 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16130 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16131 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16132 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16133 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16134 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16135 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16136 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16137 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16138 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16139 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16140 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16141 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16142 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16143 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16144 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16145 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16146 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16147 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16148 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16149 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16150 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16151 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16152 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16153 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16154 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16155 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16156 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16157 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16158 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16159 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16160 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16161 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16162 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16163 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16164 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16165 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16166 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16167 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16168 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16169 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16170 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16171 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16172 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16173 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16174 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16175 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16176 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16177 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16178 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16179 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16180 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16181 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16182 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16183 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16184 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16185 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16186 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16187 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16188 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16189 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16190 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16191 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16192 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16193 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16194 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16195 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16196 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16197 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16198 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16199 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16200 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16201 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16202 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16203 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16204 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16205 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16206 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16207 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16208 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16209 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16210 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16211 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16212 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16213 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16214 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16215 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16216 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16217 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16218 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16219 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16220 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16221 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16222 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16223 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16224 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16225 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16226 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16227 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16228 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16229 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16230 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16231 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16232 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16233 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16234 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16235 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16236 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16237 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16238 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16239 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16240 | 2023-04-10 13:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16241 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16242 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16243 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16244 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16245 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16246 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16247 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16248 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16249 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16250 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16251 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16252 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16253 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16254 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16255 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16256 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16257 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16258 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16259 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16260 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16261 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16262 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16263 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16264 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16265 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16266 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16267 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16268 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16269 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16270 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16271 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16272 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16273 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16274 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16275 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16276 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16277 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16278 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16279 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16280 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16281 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16282 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16283 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16284 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16285 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16286 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16287 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16288 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16289 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16290 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16291 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16292 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16293 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16294 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16295 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16296 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16297 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16298 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16299 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16300 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16301 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16302 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16303 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16304 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16305 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16306 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16307 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16308 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16309 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16310 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16311 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16312 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16313 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16314 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16315 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16316 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16317 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16318 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16319 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16320 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_office.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16321 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_aadrm.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16322 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16323 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16324 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16325 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16326 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16327 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16328 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16329 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16330 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16331 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16332 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16333 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16334 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16335 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16336 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16337 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16338 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16339 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16340 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16341 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16342 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16343 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16344 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16345 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16346 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16347 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16348 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16349 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16350 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16351 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16352 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16353 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16354 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16355 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16356 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16357 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16358 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16359 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16360 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16361 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16362 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16363 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16364 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16365 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16366 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16367 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16368 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16369 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16370 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16371 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16372 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16373 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16374 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16375 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16376 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16377 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16378 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16379 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16380 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16381 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16382 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16383 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16384 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16385 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16386 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16387 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16388 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16389 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16390 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16391 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16392 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16393 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16394 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16395 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16396 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16397 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16398 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16399 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16400 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16401 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16402 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16403 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16404 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16405 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16406 | 2023-04-10 13:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16407 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16408 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16409 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16410 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16411 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16412 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16413 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16414 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16415 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16416 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16417 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16418 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16419 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16420 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16421 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16422 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16423 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16424 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16425 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16426 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16427 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16428 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16429 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16430 | 2023-04-10 13:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16431 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16432 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16433 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16434 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16435 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16436 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16437 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16438 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16439 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16440 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16441 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16442 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16443 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16444 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16445 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16446 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16447 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16448 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16449 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16450 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16451 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16452 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16453 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16454 | 2023-04-10 13:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16455 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16456 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16457 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16458 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16459 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16460 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16461 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16462 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16463 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16464 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16465 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16466 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16467 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16468 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16469 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16470 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16471 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16472 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16473 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16474 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16475 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16476 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16477 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16478 | 2023-04-10 13:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16479 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16480 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16481 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16482 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16483 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16484 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16485 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16486 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16487 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16488 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16489 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16490 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16491 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16492 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16493 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16494 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16495 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16496 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16497 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16498 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16499 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16500 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16501 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16502 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16503 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16504 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16505 | 2023-04-10 13:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16506 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16507 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16508 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16509 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16510 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16511 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16512 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16513 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16514 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16515 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16516 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16517 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16518 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16519 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16520 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16521 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16522 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16523 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16524 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16525 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16526 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16527 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16528 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16529 | 2023-04-10 13:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16530 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16531 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16532 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16533 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16534 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16535 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16536 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16537 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16538 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16539 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16540 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16541 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16542 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16543 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16544 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16545 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16546 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16547 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16548 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16549 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16550 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16551 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16552 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16553 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16554 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16555 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16556 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16557 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16558 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16559 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16560 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16561 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16562 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16563 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16564 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16565 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16566 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16567 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16568 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16569 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16570 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16571 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16572 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16573 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16574 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16575 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16576 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16577 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16578 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16579 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16580 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16581 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16582 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16583 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16584 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16585 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16586 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16587 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16588 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16589 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16590 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16591 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16592 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16593 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16594 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16595 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16596 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16597 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16598 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16599 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16600 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16601 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16602 | 2023-04-10 13:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16603 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16604 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16605 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16606 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16607 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16608 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16609 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16610 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16611 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16612 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16613 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16614 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16615 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16616 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16617 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16618 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16619 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16620 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16621 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16622 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16623 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16624 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16625 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16626 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16627 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16628 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16629 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16630 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16631 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16632 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16633 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16634 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16635 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16636 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16637 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16638 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16639 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16640 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16641 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16642 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16643 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16644 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16645 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16646 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16647 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16648 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16649 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16650 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16651 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16652 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16653 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16654 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16655 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16656 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16657 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16658 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16659 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16660 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16661 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16662 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16663 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16664 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16665 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16666 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16667 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16668 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16669 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16670 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16671 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16672 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16673 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16674 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16675 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16676 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16677 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16678 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16679 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16680 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16681 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16682 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16683 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16684 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16685 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16686 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16687 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16688 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16689 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16690 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16691 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16692 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16693 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16694 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16695 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16696 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16697 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16698 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16699 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16700 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16701 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16702 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16703 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16704 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16705 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16706 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16707 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16708 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16709 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16710 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16711 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16712 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16713 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16714 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16715 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16716 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16717 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16718 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16719 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16720 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16721 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16722 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16723 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16724 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16725 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16726 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16727 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16728 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16729 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16730 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16731 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16732 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16733 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16734 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16735 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16736 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16737 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16738 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16739 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16740 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16741 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16742 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16743 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16744 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16745 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16746 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16747 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16748 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16749 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16750 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16751 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16752 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16753 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16754 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16755 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16756 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16757 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16758 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16759 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16760 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16761 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16762 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16763 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16764 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16765 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16766 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16767 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16768 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16769 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16770 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16771 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16772 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16773 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16774 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16775 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16776 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16777 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16778 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16779 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16780 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16781 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16782 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16783 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16784 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16785 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16786 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16787 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16788 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16789 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16790 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16791 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16792 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16793 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16794 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16795 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16796 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16797 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16798 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16799 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16800 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16801 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16802 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16803 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16804 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16805 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16806 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16807 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16808 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16809 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16810 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16811 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16812 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16813 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16814 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16815 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16816 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16817 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16818 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16819 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16820 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16821 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16822 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16823 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16824 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16825 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16826 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16827 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16828 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16829 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16830 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16831 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16832 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16833 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16834 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16835 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16836 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16837 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16838 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16839 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16840 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16841 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16842 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16843 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16844 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16845 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16846 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16847 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16848 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16849 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16850 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16851 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16852 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16853 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16854 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16855 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16856 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16857 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16858 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16859 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16860 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16861 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16862 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16863 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16864 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16865 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16866 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16867 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16868 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16869 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16870 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16871 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16872 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16873 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16874 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16875 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16876 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16877 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16878 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16879 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16880 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16881 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16882 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16883 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16884 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16885 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16886 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16887 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16888 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16889 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16890 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16891 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16892 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x4CE6512||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 16893 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x4CE7183||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 16894 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x4CE72BB||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 16895 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x4CE656D||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 16896 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x4CE7183||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16897 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x4CE72BB| Linked Logon ID: 0x4CE7183| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16898 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x4CE7183| Linked Logon ID: 0x4CE72BB| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16899 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 16900 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 16901 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 16902 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 16903 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x4CE6512||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16904 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x4CE656D| Linked Logon ID: 0x4CE6512| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16905 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x4CE6512| Linked Logon ID: 0x4CE656D| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16906 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 16907 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 16908 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 16909 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 16910 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16911 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16912 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16913 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16914 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16915 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16916 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16917 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16918 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16919 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16920 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16921 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16922 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16923 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16924 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16925 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16926 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16927 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16928 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16929 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16930 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16931 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16932 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16933 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16934 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16935 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16936 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16937 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16938 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16939 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16940 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16941 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16942 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16943 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16944 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16945 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16946 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16947 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16948 | 2023-04-10 13:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16949 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16950 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16951 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16952 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16953 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16954 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16955 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16956 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16957 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16958 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16959 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16960 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16961 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16962 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16963 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16964 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16965 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16966 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16967 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16968 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16969 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16970 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16971 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16972 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16973 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16974 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16975 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16976 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16977 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16978 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16979 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16980 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16981 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 16982 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16983 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16984 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16985 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16986 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16987 | 2023-04-10 12:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16988 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16989 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16990 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16991 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 16992 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 16993 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16994 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16995 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16996 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16997 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 16998 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 16999 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17000 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17001 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17002 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17003 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17004 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17005 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17006 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17007 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17008 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17009 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17010 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17011 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17012 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17013 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17014 | 2023-04-10 12:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17015 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17016 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17017 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17018 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17019 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17020 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17021 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17022 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17023 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17024 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17025 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17026 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17027 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17028 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17029 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17030 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17031 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17032 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17033 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17034 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17035 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17036 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17037 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17038 | 2023-04-10 12:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17039 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17040 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17041 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17042 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17043 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17044 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17045 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17046 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17047 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17048 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17049 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17050 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17051 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17052 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17053 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17054 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17055 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17056 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17057 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17058 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17059 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17060 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17061 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17062 | 2023-04-10 12:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17063 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17064 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17065 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17066 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17067 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17068 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17069 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17070 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17071 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17072 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17073 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17074 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17075 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17076 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17077 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17078 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17079 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17080 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17081 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17082 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17083 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17084 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17085 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17086 | 2023-04-10 12:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17087 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17088 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17089 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17090 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17091 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17092 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17093 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17094 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17095 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17096 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17097 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17098 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17099 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17100 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17101 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17102 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17103 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17104 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17105 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17106 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17107 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17108 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17109 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17110 | 2023-04-10 12:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17111 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17112 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17113 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17114 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17115 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17116 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17117 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17118 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17119 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17120 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17121 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17122 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17123 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17124 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17125 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x6ca8| Process Name: C:\Windows\System32\LogonUI.exe |
| 17126 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17127 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17128 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17129 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17130 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17131 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17132 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17133 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17134 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17135 | 2023-04-10 12:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17136 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17137 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17138 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17139 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17140 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17141 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17142 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17143 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17144 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17145 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17146 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17147 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17148 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17149 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17150 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17151 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17152 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17153 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17154 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17155 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17156 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17157 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17158 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17159 | 2023-04-10 12:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17160 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17161 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17162 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17163 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17164 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17165 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17166 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17167 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17168 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17169 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17170 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17171 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17172 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17173 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17174 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17175 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17176 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17177 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17178 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17179 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17180 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17181 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17182 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17183 | 2023-04-10 12:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17184 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17185 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17186 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17187 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17188 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17189 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17190 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17191 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17192 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17193 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17194 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17195 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17196 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17197 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17198 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17199 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17200 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17201 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17202 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17203 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17204 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17205 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17206 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17207 | 2023-04-10 12:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17208 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17209 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17210 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17211 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17212 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17213 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17214 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17215 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17216 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17217 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17218 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17219 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17220 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17221 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17222 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17223 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17224 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17225 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17226 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17227 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17228 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17229 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17230 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17231 | 2023-04-10 12:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17232 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17233 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17234 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17235 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17236 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17237 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17238 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17239 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17240 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17241 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17242 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17243 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17244 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17245 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17246 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17247 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17248 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17249 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17250 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17251 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17252 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17253 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17254 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17255 | 2023-04-10 11:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17256 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17257 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17258 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17259 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17260 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17261 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17262 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17263 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17264 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17265 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17266 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17267 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17268 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17269 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17270 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 17271 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 17272 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 17273 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 17274 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17275 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17276 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17277 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17278 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17279 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17280 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17281 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17282 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17283 | 2023-04-10 11:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17284 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17285 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17286 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17287 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17288 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 17289 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 17290 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17291 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17292 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17293 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17294 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17295 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17296 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17297 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17298 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17299 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17300 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17301 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17302 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17303 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17304 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17305 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17306 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17307 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17308 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17309 | 2023-04-10 11:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17310 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17311 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17312 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17313 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17314 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17315 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17316 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17317 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17318 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17319 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17320 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17321 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17322 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17323 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17324 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17325 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17326 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17327 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17328 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17329 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17330 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17331 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17332 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17333 | 2023-04-10 11:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17334 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17335 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17336 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17337 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17338 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17339 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17340 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17341 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17342 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17343 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17344 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17345 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17346 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17347 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17348 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17349 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17350 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17351 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17352 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17353 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17354 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17355 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17356 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17357 | 2023-04-10 11:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17358 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17359 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17360 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17361 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17362 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17363 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17364 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17365 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17366 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17367 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17368 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17369 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17370 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17371 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17372 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17373 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17374 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17375 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17376 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17377 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17378 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17379 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17380 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17381 | 2023-04-10 11:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17382 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17383 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17384 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17385 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17386 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17387 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17388 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17389 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17390 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17391 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17392 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17393 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17394 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17395 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17396 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17397 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17398 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17399 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17400 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17401 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17402 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17403 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17404 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17405 | 2023-04-10 11:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17406 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17407 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17408 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17409 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17410 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17411 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17412 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17413 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17414 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17415 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17416 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17417 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17418 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17419 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17420 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17421 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17422 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17423 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17424 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17425 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17426 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17427 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17428 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17429 | 2023-04-10 11:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17430 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17431 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17432 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17433 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17434 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17435 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17436 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17437 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17438 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17439 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17440 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17441 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17442 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17443 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17444 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17445 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17446 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17447 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17448 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17449 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17450 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17451 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17452 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17453 | 2023-04-10 11:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17454 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17455 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17456 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17457 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17458 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17459 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17460 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17461 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17462 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17463 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17464 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17465 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17466 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17467 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17468 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17469 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17470 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17471 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17472 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17473 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17474 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17475 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17476 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17477 | 2023-04-10 11:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17478 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17479 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17480 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17481 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17482 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17483 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17484 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17485 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17486 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17487 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17488 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17489 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17490 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17491 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17492 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17493 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17494 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17495 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17496 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17497 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17498 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17499 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17500 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17501 | 2023-04-10 11:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17502 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17503 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17504 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17505 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17506 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17507 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17508 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17509 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17510 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17511 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17512 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17513 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17514 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17515 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17516 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17517 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17518 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17519 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17520 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17521 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17522 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17523 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17524 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17525 | 2023-04-10 11:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17526 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17527 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17528 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17529 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17530 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17531 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17532 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17533 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17534 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17535 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17536 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17537 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17538 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17539 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17540 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17541 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17542 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17543 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17544 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17545 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17546 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17547 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17548 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17549 | 2023-04-10 11:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17550 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17551 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17552 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17553 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17554 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17555 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17556 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17557 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17558 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17559 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17560 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17561 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17562 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17563 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17564 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17565 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17566 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 17567 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17568 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17569 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17570 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17571 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17572 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17573 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17574 | 2023-04-10 11:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17575 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17576 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17577 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17578 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17579 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17580 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17581 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17582 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17583 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17584 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17585 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17586 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17587 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17588 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17589 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17590 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17591 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17592 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17593 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17594 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17595 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17596 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17597 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17598 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17599 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17600 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17601 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17602 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17603 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17604 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17605 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17606 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17607 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17608 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17609 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17610 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17611 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17612 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17613 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 17614 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 17615 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 17616 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17617 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17618 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17619 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17620 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17621 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17622 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17623 | 2023-04-10 11:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17624 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17625 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17626 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17627 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17628 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17629 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17630 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17631 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17632 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17633 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17634 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17635 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17636 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17637 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17638 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17639 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17640 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17641 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17642 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17643 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17644 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17645 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17646 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17647 | 2023-04-10 11:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17648 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17649 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17650 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17651 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17652 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17653 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17654 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17655 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17656 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17657 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17658 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17659 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17660 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17661 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17662 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17663 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17664 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17665 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17666 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17667 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17668 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17669 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17670 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17671 | 2023-04-10 11:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17672 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17673 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17674 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17675 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17676 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17677 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17678 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17679 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17680 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17681 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17682 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17683 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17684 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17685 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17686 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17687 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17688 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 17689 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 17690 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17691 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17692 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17693 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17694 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17695 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17696 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17697 | 2023-04-10 11:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17698 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17699 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17700 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17701 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17702 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17703 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17704 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17705 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17706 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17707 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17708 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17709 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17710 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17711 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17712 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17713 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17714 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17715 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17716 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17717 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17718 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17719 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17720 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17721 | 2023-04-10 11:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17722 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17723 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17724 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17725 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17726 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17727 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17728 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17729 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17730 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17731 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17732 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17733 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17734 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17735 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17736 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17737 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17738 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17739 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17740 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17741 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17742 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17743 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17744 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17745 | 2023-04-10 11:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17746 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17747 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17748 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17749 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17750 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17751 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17752 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17753 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17754 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17755 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17756 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17757 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17758 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17759 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17760 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17761 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17762 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17763 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17764 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17765 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17766 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17767 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17768 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17769 | 2023-04-10 11:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17770 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17771 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17772 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17773 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17774 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17775 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17776 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17777 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17778 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17779 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17780 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17781 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17782 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17783 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17784 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17785 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17786 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17787 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17788 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17789 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17790 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17791 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17792 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17793 | 2023-04-10 11:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17794 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17795 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17796 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17797 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17798 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17799 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17800 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17801 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17802 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17803 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17804 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17805 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17806 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17807 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17808 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17809 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17810 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17811 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17812 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17813 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17814 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17815 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17816 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17817 | 2023-04-10 11:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17818 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17819 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17820 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17821 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17822 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17823 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17824 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17825 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17826 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17827 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17828 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17829 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17830 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17831 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17832 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17833 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17834 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17835 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17836 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17837 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17838 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17839 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17840 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17841 | 2023-04-10 11:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17842 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17843 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17844 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17845 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17846 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17847 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17848 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17849 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17850 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17851 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17852 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17853 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17854 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17855 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17856 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17857 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17858 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17859 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17860 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17861 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17862 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17863 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17864 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17865 | 2023-04-10 11:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17866 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17867 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17868 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17869 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17870 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17871 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17872 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17873 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17874 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17875 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17876 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17877 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17878 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17879 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17880 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17881 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17882 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17883 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17884 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17885 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17886 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17887 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17888 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17889 | 2023-04-10 11:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17890 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17891 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17892 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17893 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17894 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17895 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17896 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17897 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17898 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17899 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17900 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17901 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17902 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17903 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17904 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17905 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17906 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17907 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17908 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17909 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17910 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17911 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17912 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17913 | 2023-04-10 11:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17914 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17915 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17916 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17917 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17918 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17919 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17920 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17921 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17922 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17923 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17924 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17925 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17926 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17927 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17928 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17929 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17930 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17931 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17932 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17933 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17934 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17935 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17936 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17937 | 2023-04-10 11:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17938 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17939 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17940 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17941 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17942 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17943 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17944 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17945 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17946 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17947 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17948 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17949 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17950 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17951 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17952 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17953 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17954 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17955 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17956 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17957 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17958 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17959 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17960 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17961 | 2023-04-10 11:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17962 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17963 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17964 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17965 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17966 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17967 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17968 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17969 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17970 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17971 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17972 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17973 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17974 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17975 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17976 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17977 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17978 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17979 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17980 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17981 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17982 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17983 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17984 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17985 | 2023-04-10 11:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17986 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17987 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17988 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17989 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17990 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17991 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17992 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17993 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17994 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17995 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17996 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17997 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 17998 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 17999 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18000 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18001 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18002 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18003 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18004 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18005 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18006 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18007 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18008 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18009 | 2023-04-10 11:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18010 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18011 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18012 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18013 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18014 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18015 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18016 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18017 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18018 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18019 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18020 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18021 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18022 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18023 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18024 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18025 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18026 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18027 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18028 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18029 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18030 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18031 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18032 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18033 | 2023-04-10 11:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18034 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18035 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18036 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18037 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18038 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18039 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18040 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18041 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18042 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18043 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18044 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18045 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18046 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18047 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18048 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18049 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18050 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18051 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18052 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18053 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18054 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18055 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18056 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18057 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18058 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18059 | 2023-04-10 11:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18060 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18061 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18062 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18063 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18064 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18065 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18066 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18067 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18068 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18069 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18070 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18071 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18072 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18073 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18074 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18075 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18076 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18077 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18078 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18079 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18080 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18081 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18082 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18083 | 2023-04-10 11:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18084 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18085 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18086 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18087 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18088 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18089 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18090 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18091 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18092 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18093 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18094 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18095 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18096 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18097 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18098 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18099 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18100 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18101 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18102 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18103 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18104 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18105 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18106 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18107 | 2023-04-10 11:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18108 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18109 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18110 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18111 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18112 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18113 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18114 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18115 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18116 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18117 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18118 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18119 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18120 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18121 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18122 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18123 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18124 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18125 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18126 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18127 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18128 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18129 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18130 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18131 | 2023-04-10 11:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18132 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18133 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18134 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18135 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18136 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18137 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18138 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18139 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18140 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18141 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18142 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18143 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18144 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18145 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18146 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18147 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18148 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18149 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18150 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18151 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18152 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18153 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18154 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18155 | 2023-04-10 11:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18156 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18157 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18158 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18159 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18160 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18161 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18162 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18163 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18164 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18165 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18166 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18167 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18168 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18169 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18170 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18171 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18172 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18173 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18174 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18175 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18176 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18177 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18178 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18179 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18180 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18181 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18182 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18183 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18184 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18185 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18186 | 2023-04-10 11:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18187 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18188 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18189 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18190 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18191 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18192 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18193 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18194 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18195 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18196 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18197 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18198 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18199 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18200 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18201 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18202 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18203 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18204 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18205 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18206 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18207 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18208 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18209 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18210 | 2023-04-10 11:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18211 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18212 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18213 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18214 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18215 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18216 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18217 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18218 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18219 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18220 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18221 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18222 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18223 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18224 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18225 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18226 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18227 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18228 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18229 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18230 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18231 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18232 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18233 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18234 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18235 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18236 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18237 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18238 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18239 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18240 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18241 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18242 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18243 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18244 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18245 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18246 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18247 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18248 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18249 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18250 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18251 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18252 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18253 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18254 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18255 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18256 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18257 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18258 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18259 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18260 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18261 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18262 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18263 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18264 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18265 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18266 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18267 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18268 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18269 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18270 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18271 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18272 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18273 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18274 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18275 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18276 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18277 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18278 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18279 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18280 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18281 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18282 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18283 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18284 | 2023-04-10 11:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18285 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18286 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18287 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18288 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18289 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18290 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18291 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18292 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18293 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18294 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18295 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18296 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18297 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18298 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18299 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18300 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18301 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18302 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18303 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18304 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18305 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18306 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18307 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18308 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18309 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18310 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18311 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18312 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18313 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18314 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18315 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18316 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18317 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18318 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18319 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18320 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18321 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18322 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18323 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18324 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18325 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18326 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18327 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18328 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18329 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18330 | 2023-04-10 11:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18331 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18332 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18333 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18334 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18335 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18336 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18337 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18338 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18339 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18340 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18341 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18342 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18343 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18344 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18345 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18346 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18347 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18348 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18349 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18350 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18351 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18352 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18353 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18354 | 2023-04-10 11:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18355 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18356 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18357 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18358 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18359 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18360 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18361 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18362 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18363 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18364 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18365 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18366 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18367 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18368 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18369 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18370 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18371 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18372 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18373 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18374 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18375 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18376 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18377 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18378 | 2023-04-10 11:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18379 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18380 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18381 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18382 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18383 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18384 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18385 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18386 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18387 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18388 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18389 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18390 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18391 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18392 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18393 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18394 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18395 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18396 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18397 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18398 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18399 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18400 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18401 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18402 | 2023-04-10 11:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18403 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18404 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18405 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18406 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18407 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18408 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18409 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18410 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18411 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18412 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18413 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18414 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18415 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18416 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18417 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18418 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18419 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18420 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18421 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18422 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18423 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18424 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18425 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18426 | 2023-04-10 11:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18427 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18428 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18429 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18430 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18431 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18432 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18433 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18434 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18435 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18436 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18437 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18438 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18439 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18440 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18441 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18442 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18443 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18444 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18445 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18446 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18447 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18448 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18449 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18450 | 2023-04-10 11:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18451 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18452 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18453 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18454 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18455 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18456 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18457 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18458 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18459 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18460 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18461 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18462 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18463 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18464 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18465 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18466 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18467 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18468 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18469 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18470 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18471 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18472 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18473 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18474 | 2023-04-10 11:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18475 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18476 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18477 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18478 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18479 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18480 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18481 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18482 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18483 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18484 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18485 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18486 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18487 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18488 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18489 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18490 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18491 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18492 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18493 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18494 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18495 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18496 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18497 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18498 | 2023-04-10 11:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18499 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18500 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18501 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18502 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18503 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18504 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18505 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18506 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18507 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18508 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18509 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18510 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18511 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18512 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18513 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18514 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18515 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18516 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18517 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18518 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18519 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18520 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18521 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18522 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18523 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18524 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18525 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18526 | 2023-04-10 11:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18527 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18528 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18529 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18530 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18531 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18532 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18533 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18534 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18535 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18536 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18537 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18538 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18539 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18540 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18541 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18542 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18543 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18544 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18545 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18546 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18547 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18548 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18549 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18550 | 2023-04-10 11:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18551 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18552 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18553 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18554 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18555 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18556 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18557 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18558 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18559 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18560 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18561 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18562 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18563 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18564 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18565 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18566 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18567 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18568 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18569 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18570 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18571 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18572 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18573 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18574 | 2023-04-10 11:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18575 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18576 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18577 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18578 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18579 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18580 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18581 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18582 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18583 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18584 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18585 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18586 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18587 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18588 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18589 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18590 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18591 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18592 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18593 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18594 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18595 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18596 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18597 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18598 | 2023-04-10 11:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18599 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18600 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18601 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18602 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18603 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18604 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18605 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18606 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18607 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18608 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18609 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18610 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18611 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18612 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18613 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18614 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18615 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18616 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18617 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18618 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18619 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18620 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18621 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18622 | 2023-04-10 11:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18623 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18624 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18625 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18626 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18627 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18628 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18629 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18630 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18631 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18632 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18633 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18634 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18635 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18636 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18637 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18638 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18639 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18640 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18641 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18642 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18643 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18644 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18645 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18646 | 2023-04-10 11:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18647 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18648 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18649 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18650 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18651 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18652 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18653 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18654 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18655 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18656 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18657 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18658 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18659 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18660 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18661 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18662 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18663 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18664 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18665 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18666 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18667 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18668 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18669 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18670 | 2023-04-10 11:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18671 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18672 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18673 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18674 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18675 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18676 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18677 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18678 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18679 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18680 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18681 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18682 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18683 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18684 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18685 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18686 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18687 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18688 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18689 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18690 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18691 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18692 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18693 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18694 | 2023-04-10 11:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18695 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18696 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18697 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18698 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18699 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18700 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18701 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18702 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18703 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18704 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18705 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18706 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18707 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18708 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18709 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18710 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18711 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18712 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18713 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18714 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18715 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18716 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18717 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18718 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18719 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18720 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18721 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18722 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18723 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18724 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18725 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18726 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18727 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18728 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18729 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18730 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18731 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18732 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18733 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18734 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18735 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18736 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18737 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18738 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18739 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18740 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18741 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18742 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18743 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18744 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18745 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18746 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18747 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18748 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18749 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18750 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18751 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18752 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18753 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18754 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18755 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18756 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18757 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18758 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18759 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18760 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18761 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18762 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18763 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18764 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18765 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18766 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18767 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18768 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18769 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18770 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18771 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18772 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18773 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18774 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18775 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18776 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18777 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18778 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18779 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 18780 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18781 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18782 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18783 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18784 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18785 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18786 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18787 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18788 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18789 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18790 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18791 | 2023-04-10 11:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18792 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18793 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18794 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18795 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18796 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18797 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18798 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18799 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18800 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18801 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18802 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18803 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18804 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18805 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18806 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18807 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18808 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18809 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18810 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18811 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18812 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18813 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18814 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18815 | 2023-04-10 11:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18816 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18817 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18818 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18819 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18820 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18821 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18822 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18823 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18824 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18825 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18826 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18827 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18828 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18829 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18830 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18831 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18832 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18833 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18834 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18835 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18836 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18837 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18838 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18839 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18840 | 2023-04-10 11:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18841 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x48CD0E4||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 18842 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x48CDA4C||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 18843 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x48CD142||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 18844 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x48CDB60||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 18845 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x48CDA4C||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18846 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x48CDB60| Linked Logon ID: 0x48CDA4C| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18847 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x48CDA4C| Linked Logon ID: 0x48CDB60| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18848 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 18849 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 18850 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 18851 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 18852 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x48CD0E4||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18853 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x48CD142| Linked Logon ID: 0x48CD0E4| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18854 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x48CD0E4| Linked Logon ID: 0x48CD142| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18855 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 18856 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 18857 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 18858 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 18859 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 18860 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 18861 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18862 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18863 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18864 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18865 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18866 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18867 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18868 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18869 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18870 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18871 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18872 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18873 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18874 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18875 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18876 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18877 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18878 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18879 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18880 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18881 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18882 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18883 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18884 | 2023-04-10 11:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18885 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18886 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18887 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18888 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18889 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18890 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18891 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18892 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18893 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18894 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18895 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18896 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18897 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18898 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18899 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18900 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18901 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18902 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18903 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18904 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18905 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18906 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18907 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18908 | 2023-04-10 10:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18909 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18910 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18911 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18912 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18913 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18914 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18915 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18916 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18917 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18918 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18919 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18920 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18921 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18922 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18923 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18924 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18925 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18926 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18927 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18928 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18929 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18930 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18931 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18932 | 2023-04-10 10:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18933 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18934 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18935 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18936 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18937 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18938 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18939 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18940 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18941 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18942 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18943 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18944 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18945 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18946 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18947 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18948 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18949 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18950 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18951 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18952 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18953 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18954 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18955 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18956 | 2023-04-10 10:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18957 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18958 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18959 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18960 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18961 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18962 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18963 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18964 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18965 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18966 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18967 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18968 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18969 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18970 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18971 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18972 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18973 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18974 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18975 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18976 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18977 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18978 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18979 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18980 | 2023-04-10 10:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18981 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18982 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18983 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18984 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18985 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18986 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18987 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18988 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18989 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18990 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18991 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18992 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18993 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18994 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18995 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18996 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18997 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 18998 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 18999 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19000 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19001 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19002 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19003 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19004 | 2023-04-10 10:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19005 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19006 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19007 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19008 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19009 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19010 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19011 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19012 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19013 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19014 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19015 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19016 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19017 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19018 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19019 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19020 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19021 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19022 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19023 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19024 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19025 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19026 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19027 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19028 | 2023-04-10 10:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19029 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19030 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19031 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19032 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19033 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19034 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19035 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19036 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19037 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19038 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19039 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19040 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19041 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19042 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19043 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19044 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19045 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19046 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19047 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19048 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19049 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19050 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19051 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19052 | 2023-04-10 10:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19053 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19054 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19055 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19056 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19057 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19058 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19059 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19060 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19061 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19062 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19063 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 19064 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 19065 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19066 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19067 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19068 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19069 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19070 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19071 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19072 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19073 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 19074 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 19075 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19076 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19077 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19078 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19079 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5b08| Process Name: C:\Windows\System32\LogonUI.exe |
| 19080 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19081 | 2023-04-10 10:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19082 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19083 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19084 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19085 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19086 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19087 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19088 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19089 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19090 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19091 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19092 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19093 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19094 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19095 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19096 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19097 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19098 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19099 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19100 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19101 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19102 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19103 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19104 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19105 | 2023-04-10 10:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19106 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19107 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19108 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19109 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19110 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19111 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19112 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19113 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19114 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19115 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19116 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19117 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19118 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19119 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19120 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19121 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19122 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19123 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19124 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19125 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19126 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19127 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19128 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19129 | 2023-04-10 10:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19130 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19131 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19132 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19133 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19134 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19135 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19136 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19137 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19138 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19139 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19140 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19141 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19142 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19143 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19144 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19145 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19146 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19147 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19148 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19149 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19150 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19151 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19152 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19153 | 2023-04-10 10:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19154 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19155 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19156 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19157 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19158 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19159 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19160 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19161 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19162 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19163 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19164 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19165 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19166 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19167 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19168 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 19169 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 19170 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19171 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19172 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 19173 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 19174 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19175 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19176 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19177 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19178 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19179 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19180 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19181 | 2023-04-10 10:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19182 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19183 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19184 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19185 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19186 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19187 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19188 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19189 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19190 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19191 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19192 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19193 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19194 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19195 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19196 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19197 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19198 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19199 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19200 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19201 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19202 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19203 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19204 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19205 | 2023-04-10 10:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19206 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19207 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19208 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19209 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19210 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19211 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19212 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19213 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19214 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19215 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19216 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19217 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19218 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19219 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19220 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19221 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19222 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19223 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19224 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19225 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19226 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19227 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19228 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19229 | 2023-04-10 10:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19230 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19231 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19232 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19233 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19234 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19235 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19236 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19237 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19238 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19239 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19240 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19241 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19242 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19243 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19244 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19245 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19246 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19247 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19248 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19249 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19250 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19251 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19252 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19253 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19254 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19255 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19256 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19257 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19258 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19259 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19260 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19261 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19262 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19263 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19264 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19265 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19266 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19267 | 2023-04-10 10:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19268 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19269 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19270 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19271 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19272 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19273 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19274 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19275 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19276 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19277 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19278 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19279 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19280 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19281 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19282 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19283 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19284 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19285 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19286 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19287 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19288 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19289 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19290 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19291 | 2023-04-10 10:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19292 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19293 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19294 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19295 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19296 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19297 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19298 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19299 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19300 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19301 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19302 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19303 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19304 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19305 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19306 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19307 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19308 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19309 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19310 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19311 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19312 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19313 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19314 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19315 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19316 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19317 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19318 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19319 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19320 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19321 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19322 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19323 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19324 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19325 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19326 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19327 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19328 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19329 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19330 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19331 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19332 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19333 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19334 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19335 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19336 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19337 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19338 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19339 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19340 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19341 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19342 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19343 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19344 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19345 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19346 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19347 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19348 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19349 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19350 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19351 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19352 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19353 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19354 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19355 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19356 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19357 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19358 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19359 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19360 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19361 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19362 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19363 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19364 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19365 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19366 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19367 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19368 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19369 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19370 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19371 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19372 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19373 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19374 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19375 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19376 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19377 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19378 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19379 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19380 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19381 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19382 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19383 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19384 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19385 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19386 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19387 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19388 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19389 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19390 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19391 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19392 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19393 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19394 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19395 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19396 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19397 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19398 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19399 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19400 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19401 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19402 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19403 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19404 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19405 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19406 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19407 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19408 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19409 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19410 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19411 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19412 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19413 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19414 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19415 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19416 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19417 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19418 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19419 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19420 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19421 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19422 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19423 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19424 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19425 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19426 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19427 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19428 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19429 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 19430 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 19431 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19432 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19433 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19434 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19435 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19436 | 2023-04-10 10:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19437 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19438 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19439 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19440 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19441 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19442 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19443 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19444 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19445 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19446 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19447 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19448 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19449 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19450 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19451 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19452 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19453 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19454 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19455 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19456 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19457 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19458 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19459 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19460 | 2023-04-10 10:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19461 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19462 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19463 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19464 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19465 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19466 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19467 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19468 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19469 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19470 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19471 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19472 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19473 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19474 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19475 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19476 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19477 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19478 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19479 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19480 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19481 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19482 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19483 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19484 | 2023-04-10 10:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19485 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19486 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19487 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19488 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19489 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19490 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19491 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19492 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19493 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19494 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19495 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19496 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19497 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19498 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19499 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19500 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19501 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19502 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19503 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19504 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19505 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19506 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19507 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19508 | 2023-04-10 10:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19509 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19510 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19511 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19512 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19513 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19514 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19515 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19516 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19517 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19518 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19519 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19520 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19521 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19522 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19523 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19524 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19525 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19526 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19527 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19528 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19529 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19530 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19531 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19532 | 2023-04-10 10:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19533 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19534 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19535 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19536 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19537 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19538 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19539 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19540 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19541 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19542 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19543 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19544 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19545 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19546 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19547 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19548 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19549 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19550 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19551 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19552 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19553 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19554 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19555 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19556 | 2023-04-10 10:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19557 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19558 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19559 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19560 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19561 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19562 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19563 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19564 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19565 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19566 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19567 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19568 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19569 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19570 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19571 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19572 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19573 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19574 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19575 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19576 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19577 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19578 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19579 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19580 | 2023-04-10 10:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19581 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19582 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19583 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19584 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19585 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19586 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19587 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19588 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19589 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19590 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19591 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19592 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19593 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19594 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19595 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19596 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19597 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19598 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19599 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19600 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19601 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19602 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19603 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19604 | 2023-04-10 10:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19605 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19606 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19607 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19608 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19609 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19610 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19611 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19612 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19613 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19614 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19615 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 19616 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 19617 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19618 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19619 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19620 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19621 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19622 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19623 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19624 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19625 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19626 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19627 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19628 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19629 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19630 | 2023-04-10 10:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19631 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19632 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19633 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19634 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19635 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19636 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19637 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19638 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19639 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19640 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19641 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19642 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19643 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19644 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19645 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19646 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19647 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19648 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19649 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19650 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19651 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19652 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19653 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19654 | 2023-04-10 10:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19655 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19656 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19657 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19658 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19659 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19660 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19661 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19662 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19663 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19664 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19665 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19666 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19667 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19668 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19669 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19670 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19671 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19672 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19673 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19674 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19675 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19676 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19677 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19678 | 2023-04-10 10:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19679 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19680 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19681 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19682 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19683 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19684 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19685 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19686 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19687 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19688 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19689 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19690 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19691 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19692 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19693 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19694 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19695 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19696 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19697 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19698 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19699 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19700 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19701 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19702 | 2023-04-10 10:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19703 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19704 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19705 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19706 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19707 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19708 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19709 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19710 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19711 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19712 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19713 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19714 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19715 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19716 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19717 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19718 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19719 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19720 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19721 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19722 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19723 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19724 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19725 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19726 | 2023-04-10 10:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19727 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19728 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19729 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19730 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19731 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19732 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19733 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19734 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19735 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19736 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19737 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19738 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19739 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19740 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19741 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19742 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19743 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19744 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19745 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19746 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19747 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19748 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19749 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19750 | 2023-04-10 10:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19751 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19752 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19753 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19754 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19755 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19756 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19757 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19758 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19759 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19760 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19761 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19762 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19763 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19764 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19765 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19766 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19767 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19768 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19769 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19770 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19771 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19772 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19773 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19774 | 2023-04-10 10:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19775 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19776 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19777 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19778 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19779 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19780 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19781 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19782 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19783 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19784 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19785 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19786 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19787 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19788 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19789 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19790 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19791 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19792 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19793 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19794 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19795 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19796 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19797 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19798 | 2023-04-10 10:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19799 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 19800 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 19801 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19802 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19803 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19804 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19805 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19806 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19807 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19808 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19809 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19810 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19811 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19812 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19813 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19814 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19815 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19816 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19817 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19818 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19819 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19820 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19821 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19822 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19823 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19824 | 2023-04-10 10:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19825 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19826 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19827 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19828 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19829 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19830 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19831 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19832 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19833 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19834 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19835 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19836 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19837 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19838 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19839 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19840 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19841 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19842 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19843 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19844 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19845 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19846 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19847 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19848 | 2023-04-10 10:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19849 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19850 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19851 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19852 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19853 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19854 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19855 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19856 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19857 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19858 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19859 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19860 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19861 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19862 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19863 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19864 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19865 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19866 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19867 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19868 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19869 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19870 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19871 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19872 | 2023-04-10 10:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19873 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19874 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19875 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19876 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19877 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19878 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19879 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19880 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19881 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19882 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19883 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19884 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19885 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19886 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19887 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19888 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19889 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19890 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19891 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19892 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19893 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19894 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19895 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19896 | 2023-04-10 10:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19897 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19898 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19899 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19900 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19901 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19902 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19903 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19904 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19905 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19906 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19907 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19908 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19909 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19910 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19911 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19912 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19913 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19914 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19915 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19916 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19917 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19918 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19919 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19920 | 2023-04-10 10:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19921 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19922 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19923 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19924 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19925 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19926 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19927 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 19928 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 19929 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19930 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19931 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19932 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19933 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19934 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19935 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19936 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19937 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19938 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19939 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19940 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19941 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19942 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19943 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19944 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19945 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19946 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19947 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19948 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19949 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19950 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19951 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19952 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19953 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19954 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19955 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19956 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19957 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19958 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19959 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19960 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19961 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19962 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19963 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19964 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19965 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19966 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19967 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19968 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19969 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19970 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19971 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19972 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19973 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19974 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19975 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19976 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19977 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19978 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19979 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19980 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19981 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19982 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19983 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19984 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19985 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19986 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19987 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19988 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19989 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19990 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19991 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19992 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 19993 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 19994 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 19995 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 19996 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 19997 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 19998 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 19999 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 20000 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5600| Process Name: C:\Windows\System32\taskhostw.exe |
| 20001 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 20002 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 20003 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20004 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20005 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20006 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20007 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20008 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20009 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20010 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20011 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20012 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20013 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20014 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20015 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20016 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20017 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20018 | 2023-04-10 10:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20019 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20020 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20021 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20022 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20023 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20024 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20025 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20026 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20027 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20028 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20029 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20030 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20031 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20032 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20033 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20034 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20035 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20036 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20037 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20038 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20039 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20040 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20041 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20042 | 2023-04-10 10:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20043 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20044 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20045 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20046 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20047 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20048 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20049 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20050 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20051 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20052 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20053 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20054 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20055 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20056 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20057 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20058 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20059 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20060 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20061 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20062 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20063 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20064 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20065 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20066 | 2023-04-10 10:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20067 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 20068 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 20069 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20070 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20071 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20072 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20073 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20074 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20075 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20076 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20077 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20078 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20079 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20080 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20081 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20082 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20083 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20084 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20085 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20086 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20087 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20088 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20089 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20090 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20091 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20092 | 2023-04-10 10:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20093 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20094 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20095 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20096 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20097 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20098 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20099 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20100 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20101 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20102 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20103 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20104 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20105 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20106 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20107 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20108 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20109 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20110 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20111 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20112 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20113 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20114 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20115 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20116 | 2023-04-10 10:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20117 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20118 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20119 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20120 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20121 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20122 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20123 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20124 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20125 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20126 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20127 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20128 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20129 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20130 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20131 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20132 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20133 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20134 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20135 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20136 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20137 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20138 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20139 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20140 | 2023-04-10 10:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20141 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20142 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20143 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20144 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20145 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20146 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20147 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20148 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20149 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20150 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20151 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20152 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20153 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20154 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20155 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20156 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20157 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20158 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20159 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20160 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20161 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20162 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20163 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20164 | 2023-04-10 10:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20165 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20166 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20167 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20168 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20169 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20170 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20171 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20172 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20173 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20174 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20175 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20176 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20177 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20178 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20179 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20180 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20181 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20182 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20183 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20184 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20185 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20186 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20187 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20188 | 2023-04-10 10:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20189 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20190 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20191 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20192 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20193 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20194 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20195 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20196 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20197 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20198 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20199 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20200 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20201 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20202 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20203 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20204 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20205 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20206 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20207 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20208 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20209 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20210 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20211 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20212 | 2023-04-10 10:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20213 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20214 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20215 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20216 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20217 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20218 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20219 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20220 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20221 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20222 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20223 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20224 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20225 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20226 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20227 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20228 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20229 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20230 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20231 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20232 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20233 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20234 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20235 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20236 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20237 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20238 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20239 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20240 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20241 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20242 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20243 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20244 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20245 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20246 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20247 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20248 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20249 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20250 | 2023-04-10 10:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20251 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20252 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20253 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20254 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20255 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20256 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20257 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20258 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20259 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20260 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20261 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20262 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20263 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20264 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20265 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20266 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20267 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20268 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20269 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20270 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20271 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20272 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20273 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20274 | 2023-04-10 10:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20275 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20276 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20277 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20278 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20279 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20280 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20281 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20282 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20283 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20284 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20285 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20286 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20287 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20288 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20289 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20290 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20291 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20292 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20293 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20294 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20295 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20296 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20297 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20298 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20299 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20300 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20301 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20302 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20303 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20304 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20305 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20306 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20307 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20308 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20309 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20310 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20311 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20312 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20313 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20314 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20315 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20316 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20317 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20318 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20319 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20320 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20321 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20322 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20323 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20324 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20325 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20326 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20327 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20328 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20329 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20330 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20331 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20332 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20333 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20334 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20335 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20336 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20337 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20338 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20339 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20340 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20341 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20342 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20343 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20344 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20345 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20346 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20347 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20348 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20349 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20350 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20351 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20352 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20353 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20354 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20355 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20356 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20357 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20358 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20359 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20360 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20361 | 2023-04-10 10:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20362 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20363 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20364 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20365 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20366 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20367 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20368 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20369 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20370 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20371 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20372 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20373 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20374 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20375 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20376 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20377 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20378 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20379 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20380 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20381 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20382 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20383 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20384 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20385 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20386 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20387 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20388 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20389 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20390 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20391 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20392 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20393 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20394 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20395 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20396 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20397 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20398 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 20399 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 20400 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20401 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20402 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20403 | 2023-04-10 10:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20404 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20405 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20406 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20407 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20408 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20409 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20410 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20411 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20412 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20413 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20414 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20415 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20416 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20417 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20418 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20419 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20420 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20421 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20422 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20423 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20424 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20425 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20426 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20427 | 2023-04-10 10:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20428 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20429 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20430 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20431 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20432 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20433 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20434 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20435 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20436 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20437 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20438 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20439 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20440 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20441 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20442 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20443 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20444 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20445 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20446 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20447 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20448 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20449 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20450 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20451 | 2023-04-10 10:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20452 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20453 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20454 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20455 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20456 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20457 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20458 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20459 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20460 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20461 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20462 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20463 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20464 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20465 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20466 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20467 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20468 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20469 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20470 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20471 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20472 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20473 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20474 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20475 | 2023-04-10 10:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20476 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20477 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20478 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20479 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20480 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20481 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20482 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20483 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20484 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20485 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20486 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20487 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20488 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20489 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20490 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20491 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20492 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20493 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20494 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20495 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20496 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20497 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20498 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20499 | 2023-04-10 10:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20500 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20501 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20502 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20503 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20504 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20505 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20506 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20507 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20508 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20509 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20510 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20511 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20512 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20513 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20514 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20515 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20516 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20517 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20518 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20519 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20520 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20521 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20522 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20523 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20524 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20525 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20526 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20527 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20528 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20529 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20530 | 2023-04-10 10:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20531 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20532 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20533 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20534 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20535 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20536 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20537 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20538 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20539 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20540 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20541 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20542 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20543 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20544 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20545 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20546 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20547 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20548 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20549 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20550 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20551 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20552 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20553 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20554 | 2023-04-10 10:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20555 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20556 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20557 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20558 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20559 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20560 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20561 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20562 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20563 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20564 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20565 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20566 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20567 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20568 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20569 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20570 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20571 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20572 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20573 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20574 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20575 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20576 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20577 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20578 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20579 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20580 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20581 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20582 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20583 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20584 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20585 | 2023-04-10 10:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20586 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20587 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20588 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20589 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20590 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20591 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20592 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20593 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20594 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20595 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20596 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20597 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20598 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20599 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20600 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20601 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20602 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20603 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20604 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20605 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20606 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20607 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20608 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20609 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20610 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20611 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20612 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20613 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20614 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20615 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20616 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20617 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20618 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20619 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20620 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20621 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20622 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20623 | 2023-04-10 10:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20624 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20625 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20626 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20627 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20628 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20629 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20630 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20631 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20632 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20633 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20634 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20635 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20636 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20637 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20638 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20639 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20640 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20641 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20642 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20643 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20644 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20645 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20646 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20647 | 2023-04-10 10:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20648 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20649 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20650 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20651 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20652 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20653 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20654 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20655 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20656 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20657 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20658 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20659 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20660 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20661 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20662 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20663 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20664 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20665 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20666 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20667 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20668 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20669 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20670 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20671 | 2023-04-10 10:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20672 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20673 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20674 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20675 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20676 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20677 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20678 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20679 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20680 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20681 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20682 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20683 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20684 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20685 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20686 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20687 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20688 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20689 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20690 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20691 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20692 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20693 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20694 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20695 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20696 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20697 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20698 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20699 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20700 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20701 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20702 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20703 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20704 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20705 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20706 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20707 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20708 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20709 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20710 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20711 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20712 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20713 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20714 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20715 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20716 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20717 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20718 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20719 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20720 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20721 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20722 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20723 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20724 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20725 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20726 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20727 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20728 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20729 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20730 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20731 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20732 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20733 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20734 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20735 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20736 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20737 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20738 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20739 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20740 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20741 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20742 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20743 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20744 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20745 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20746 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20747 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20748 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20749 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20750 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20751 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20752 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20753 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20754 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20755 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20756 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20757 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20758 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20759 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20760 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20761 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20762 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20763 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20764 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20765 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20766 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20767 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20768 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20769 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20770 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20771 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20772 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20773 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20774 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20775 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20776 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20777 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20778 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20779 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20780 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20781 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20782 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20783 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20784 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20785 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20786 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20787 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20788 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20789 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20790 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20791 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20792 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20793 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20794 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20795 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20796 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20797 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20798 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20799 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20800 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20801 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20802 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20803 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20804 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20805 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20806 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20807 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20808 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20809 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20810 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20811 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20812 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20813 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20814 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20815 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20816 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20817 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20818 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20819 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20820 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20821 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20822 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20823 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20824 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20825 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20826 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20827 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20828 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20829 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20830 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20831 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20832 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20833 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20834 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20835 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20836 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20837 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20838 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20839 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20840 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20841 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20842 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20843 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20844 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20845 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20846 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20847 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20848 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20849 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20850 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20851 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20852 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20853 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20854 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20855 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20856 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20857 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20858 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20859 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20860 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20861 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20862 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20863 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20864 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20865 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 20866 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 20867 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 20868 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20869 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20870 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20871 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20872 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20873 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20874 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20875 | 2023-04-10 09:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20876 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20877 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20878 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20879 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20880 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20881 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20882 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20883 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20884 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20885 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20886 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20887 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20888 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20889 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20890 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20891 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20892 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20893 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20894 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20895 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20896 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20897 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20898 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20899 | 2023-04-10 09:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20900 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20901 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20902 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 20903 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 20904 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20905 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20906 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20907 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20908 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20909 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20910 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20911 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20912 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20913 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20914 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20915 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20916 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20917 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20918 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20919 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20920 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20921 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20922 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20923 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20924 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20925 | 2023-04-10 09:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20926 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20927 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20928 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20929 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20930 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20931 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20932 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20933 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20934 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20935 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20936 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20937 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20938 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20939 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20940 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20941 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20942 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 4799 | Security Group Management | A security-enabled local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Group:| Security ID: BUILTIN\Administrators| Group Name: Administrators| Group Domain: Builtin||Process Information:| Process ID: 0x5e78| Process Name: C:\Windows\System32\svchost.exe |
| 20943 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20944 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20945 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 20946 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 20947 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20948 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20949 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20950 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20951 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20952 | 2023-04-10 09:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20953 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20954 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20955 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20956 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20957 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20958 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20959 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20960 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20961 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20962 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20963 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20964 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20965 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20966 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20967 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20968 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20969 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20970 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20971 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20972 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20973 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20974 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20975 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20976 | 2023-04-10 09:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20977 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20978 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20979 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20980 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20981 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20982 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20983 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20984 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20985 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20986 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20987 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20988 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20989 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20990 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20991 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20992 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20993 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20994 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20995 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20996 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20997 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 20998 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 20999 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21000 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21001 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21002 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21003 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21004 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21005 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21006 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21007 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21008 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21009 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21010 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21011 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21012 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21013 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21014 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21015 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21016 | 2023-04-10 09:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21017 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21018 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21019 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21020 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21021 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21022 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21023 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21024 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21025 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21026 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21027 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21028 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21029 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21030 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21031 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21032 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21033 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21034 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21035 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21036 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21037 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21038 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21039 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21040 | 2023-04-10 09:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21041 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21042 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21043 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21044 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21045 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21046 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21047 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21048 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21049 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21050 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21051 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21052 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21053 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21054 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21055 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21056 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21057 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21058 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21059 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21060 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21061 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21062 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21063 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21064 | 2023-04-10 09:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21065 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21066 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21067 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21068 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21069 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21070 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21071 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21072 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21073 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21074 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21075 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21076 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21077 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21078 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21079 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21080 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21081 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21082 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21083 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21084 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21085 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21086 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21087 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21088 | 2023-04-10 09:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21089 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21090 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21091 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21092 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21093 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21094 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21095 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21096 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21097 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21098 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21099 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21100 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21101 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21102 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21103 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21104 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21105 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21106 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21107 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21108 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21109 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21110 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21111 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21112 | 2023-04-10 09:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21113 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21114 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21115 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21116 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21117 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21118 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21119 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21120 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21121 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21122 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21123 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21124 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21125 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21126 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21127 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21128 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21129 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21130 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21131 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21132 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21133 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21134 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21135 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21136 | 2023-04-10 09:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21137 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21138 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21139 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21140 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21141 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21142 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21143 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21144 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21145 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21146 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21147 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21148 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21149 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21150 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21151 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21152 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21153 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21154 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21155 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21156 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21157 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21158 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21159 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21160 | 2023-04-10 09:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21161 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21162 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21163 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21164 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21165 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21166 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21167 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21168 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21169 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21170 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21171 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21172 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21173 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21174 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21175 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21176 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21177 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21178 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21179 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21180 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21181 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21182 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21183 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21184 | 2023-04-10 09:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21185 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21186 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21187 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21188 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21189 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21190 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21191 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21192 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21193 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21194 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21195 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21196 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21197 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21198 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21199 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21200 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21201 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21202 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21203 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21204 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21205 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21206 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21207 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21208 | 2023-04-10 09:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21209 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21210 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21211 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21212 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21213 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21214 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21215 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21216 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21217 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21218 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21219 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21220 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21221 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21222 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21223 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21224 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21225 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21226 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21227 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21228 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21229 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21230 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21231 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21232 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21233 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21234 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21235 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21236 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21237 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21238 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21239 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21240 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21241 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21242 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21243 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21244 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21245 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21246 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21247 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21248 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21249 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21250 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21251 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21252 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21253 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21254 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21255 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21256 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21257 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21258 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 21259 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21260 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21261 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21262 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21263 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21264 | 2023-04-10 09:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21265 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21266 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21267 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21268 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21269 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21270 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21271 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21272 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21273 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21274 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21275 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21276 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21277 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21278 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21279 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21280 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21281 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21282 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21283 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21284 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21285 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21286 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21287 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x431F441||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 21288 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x431FED6||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 21289 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x431F495||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 21290 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x4320099||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 21291 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x431FED6||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21292 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x4320099| Linked Logon ID: 0x431FED6| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21293 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x431FED6| Linked Logon ID: 0x4320099| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21294 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 21295 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 21296 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 21297 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 21298 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x431F441||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21299 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x431F495| Linked Logon ID: 0x431F441| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21300 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x431F441| Linked Logon ID: 0x431F495| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21301 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 21302 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 21303 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 21304 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 21305 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21306 | 2023-04-10 09:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21307 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21308 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21309 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21310 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21311 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21312 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21313 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21314 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21315 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21316 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21317 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21318 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21319 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21320 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21321 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21322 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21323 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21324 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21325 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21326 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21327 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21328 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21329 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21330 | 2023-04-10 09:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21331 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21332 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21333 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21334 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21335 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21336 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21337 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21338 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21339 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21340 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21341 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21342 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21343 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21344 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21345 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21346 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21347 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21348 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21349 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21350 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21351 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21352 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21353 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21354 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21355 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21356 | 2023-04-10 09:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21357 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21358 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21359 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21360 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21361 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21362 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21363 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21364 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21365 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21366 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21367 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21368 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21369 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21370 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21371 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21372 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21373 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21374 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21375 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21376 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21377 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21378 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21379 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21380 | 2023-04-10 09:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21381 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21382 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21383 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21384 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21385 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21386 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21387 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21388 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21389 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21390 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21391 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21392 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21393 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21394 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21395 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21396 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21397 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21398 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21399 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21400 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21401 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21402 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21403 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21404 | 2023-04-10 09:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21405 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21406 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21407 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21408 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21409 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21410 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21411 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21412 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21413 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21414 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21415 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21416 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21417 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21418 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21419 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21420 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21421 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21422 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21423 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21424 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21425 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21426 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21427 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21428 | 2023-04-10 09:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21429 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21430 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21431 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21432 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21433 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21434 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21435 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21436 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21437 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21438 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21439 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21440 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21441 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21442 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21443 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21444 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21445 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21446 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21447 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21448 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21449 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21450 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21451 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21452 | 2023-04-10 09:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21453 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21454 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21455 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21456 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21457 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21458 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21459 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21460 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21461 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21462 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21463 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21464 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21465 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21466 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21467 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21468 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21469 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21470 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21471 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21472 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21473 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21474 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21475 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21476 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21477 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21478 | 2023-04-10 09:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21479 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21480 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21481 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21482 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21483 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21484 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21485 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21486 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21487 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21488 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21489 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21490 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21491 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21492 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21493 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21494 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21495 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21496 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21497 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21498 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21499 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21500 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21501 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21502 | 2023-04-10 09:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21503 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21504 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21505 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21506 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21507 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21508 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21509 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21510 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21511 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21512 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21513 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21514 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21515 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21516 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21517 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21518 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21519 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21520 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21521 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21522 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21523 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21524 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21525 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21526 | 2023-04-10 09:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21527 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21528 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21529 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21530 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21531 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21532 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21533 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21534 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21535 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21536 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21537 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21538 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21539 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21540 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21541 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21542 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21543 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21544 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21545 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21546 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21547 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21548 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21549 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21550 | 2023-04-10 09:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21551 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21552 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21553 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21554 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21555 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21556 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21557 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21558 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21559 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21560 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21561 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21562 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21563 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21564 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21565 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21566 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21567 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21568 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21569 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21570 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21571 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21572 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21573 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21574 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21575 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21576 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21577 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21578 | 2023-04-10 09:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21579 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21580 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21581 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21582 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21583 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0xcd4| Process Name: C:\Windows\System32\LogonUI.exe |
| 21584 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21585 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21586 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21587 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21588 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21589 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21590 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21591 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21592 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21593 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21594 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21595 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21596 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21597 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21598 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21599 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21600 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21601 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21602 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21603 | 2023-04-10 09:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21604 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21605 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21606 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21607 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21608 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21609 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21610 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21611 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21612 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21613 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21614 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21615 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21616 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21617 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21618 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21619 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21620 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21621 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21622 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21623 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21624 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21625 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21626 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21627 | 2023-04-10 09:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21628 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21629 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21630 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21631 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21632 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21633 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21634 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21635 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21636 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21637 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21638 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21639 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21640 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21641 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21642 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21643 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21644 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21645 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21646 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21647 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21648 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21649 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21650 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21651 | 2023-04-10 09:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21652 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21653 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21654 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21655 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21656 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21657 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21658 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21659 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21660 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21661 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21662 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21663 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21664 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21665 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21666 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21667 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21668 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21669 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21670 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21671 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21672 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21673 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21674 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21675 | 2023-04-10 09:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21676 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21677 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21678 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21679 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21680 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21681 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21682 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21683 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21684 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21685 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21686 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21687 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21688 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21689 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21690 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21691 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21692 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21693 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21694 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21695 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21696 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21697 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21698 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21699 | 2023-04-10 09:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21700 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 21701 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 21702 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21703 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21704 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21705 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21706 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21707 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21708 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21709 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21710 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21711 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21712 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21713 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21714 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21715 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21716 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21717 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21718 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21719 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21720 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21721 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21722 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21723 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21724 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21725 | 2023-04-10 09:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21726 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21727 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21728 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21729 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21730 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21731 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21732 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21733 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21734 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21735 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21736 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21737 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21738 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21739 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21740 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21741 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21742 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21743 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21744 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21745 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21746 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21747 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21748 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21749 | 2023-04-10 09:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21750 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21751 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21752 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21753 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21754 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21755 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21756 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21757 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21758 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21759 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21760 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21761 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21762 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21763 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21764 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21765 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21766 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21767 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21768 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21769 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21770 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21771 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21772 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21773 | 2023-04-10 09:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21774 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21775 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21776 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21777 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21778 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21779 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21780 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21781 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21782 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21783 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21784 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21785 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21786 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21787 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21788 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21789 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21790 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21791 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21792 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21793 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21794 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21795 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21796 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21797 | 2023-04-10 09:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21798 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21799 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21800 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21801 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21802 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21803 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21804 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21805 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21806 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21807 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21808 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21809 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21810 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21811 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21812 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21813 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21814 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21815 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21816 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21817 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21818 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21819 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21820 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21821 | 2023-04-10 09:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21822 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21823 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21824 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21825 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21826 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21827 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21828 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21829 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21830 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21831 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21832 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21833 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21834 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21835 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21836 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21837 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21838 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21839 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21840 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21841 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21842 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21843 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21844 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21845 | 2023-04-10 09:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21846 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21847 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21848 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21849 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21850 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21851 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21852 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21853 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21854 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21855 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21856 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21857 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21858 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21859 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21860 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21861 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21862 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21863 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21864 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21865 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21866 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21867 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21868 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21869 | 2023-04-10 09:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21870 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21871 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21872 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21873 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21874 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21875 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21876 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21877 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21878 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21879 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21880 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21881 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21882 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21883 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21884 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21885 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21886 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21887 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21888 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21889 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21890 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21891 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21892 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21893 | 2023-04-10 09:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21894 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21895 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21896 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21897 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21898 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21899 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21900 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21901 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21902 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21903 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21904 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21905 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21906 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21907 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21908 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21909 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21910 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21911 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21912 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21913 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21914 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21915 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21916 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21917 | 2023-04-10 09:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21918 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21919 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21920 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21921 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21922 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21923 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21924 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21925 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21926 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21927 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21928 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21929 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21930 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21931 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21932 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21933 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21934 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21935 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21936 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21937 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21938 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21939 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21940 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21941 | 2023-04-10 09:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21942 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21943 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21944 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21945 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21946 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21947 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21948 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21949 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21950 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21951 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21952 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21953 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21954 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21955 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21956 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21957 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21958 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21959 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21960 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21961 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21962 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21963 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21964 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21965 | 2023-04-10 09:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21966 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21967 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21968 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21969 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21970 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21971 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21972 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21973 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21974 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21975 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21976 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21977 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21978 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21979 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21980 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21981 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21982 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21983 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21984 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21985 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21986 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21987 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21988 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21989 | 2023-04-10 09:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21990 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21991 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21992 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21993 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21994 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21995 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21996 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21997 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 21998 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 21999 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22000 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22001 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22002 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22003 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22004 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22005 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22006 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22007 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22008 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22009 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22010 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22011 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22012 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22013 | 2023-04-10 09:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22014 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22015 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22016 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22017 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22018 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22019 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22020 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22021 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22022 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22023 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22024 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22025 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22026 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22027 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22028 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22029 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22030 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22031 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22032 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22033 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22034 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22035 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22036 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22037 | 2023-04-10 09:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22038 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22039 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22040 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22041 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22042 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22043 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22044 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22045 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22046 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22047 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22048 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 22049 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 22050 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22051 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22052 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22053 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22054 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22055 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22056 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22057 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22058 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22059 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22060 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22061 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22062 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22063 | 2023-04-10 09:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22064 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22065 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22066 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22067 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22068 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22069 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22070 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22071 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22072 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22073 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22074 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22075 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22076 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22077 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22078 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22079 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22080 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22081 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22082 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22083 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22084 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22085 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22086 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22087 | 2023-04-10 09:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22088 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22089 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22090 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22091 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22092 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22093 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22094 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22095 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22096 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22097 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22098 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22099 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22100 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22101 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22102 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22103 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22104 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22105 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22106 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22107 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22108 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22109 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22110 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22111 | 2023-04-10 09:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22112 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22113 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22114 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22115 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22116 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22117 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22118 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22119 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22120 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22121 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22122 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22123 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22124 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22125 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22126 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22127 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22128 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22129 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22130 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22131 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22132 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22133 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22134 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22135 | 2023-04-10 09:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22136 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22137 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22138 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22139 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22140 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22141 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22142 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22143 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22144 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22145 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22146 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22147 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22148 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22149 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22150 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22151 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22152 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22153 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22154 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22155 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22156 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22157 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22158 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22159 | 2023-04-10 09:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22160 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22161 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22162 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22163 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22164 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22165 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22166 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22167 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22168 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22169 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22170 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22171 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22172 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22173 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22174 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22175 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22176 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22177 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22178 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22179 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22180 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22181 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22182 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22183 | 2023-04-10 09:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22184 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22185 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22186 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22187 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22188 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22189 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22190 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22191 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22192 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22193 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22194 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22195 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22196 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22197 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22198 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22199 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22200 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22201 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22202 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22203 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22204 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22205 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22206 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22207 | 2023-04-10 09:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22208 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22209 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22210 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22211 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22212 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22213 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22214 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22215 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22216 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22217 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22218 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22219 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22220 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22221 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22222 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22223 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22224 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22225 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22226 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22227 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22228 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22229 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22230 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22231 | 2023-04-10 09:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22232 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22233 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22234 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22235 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22236 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22237 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22238 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22239 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22240 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22241 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22242 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22243 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22244 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22245 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22246 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22247 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22248 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22249 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22250 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22251 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22252 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22253 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22254 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22255 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22256 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22257 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22258 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22259 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22260 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22261 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22262 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22263 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22264 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22265 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22266 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22267 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22268 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22269 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22270 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22271 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22272 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22273 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22274 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22275 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22276 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22277 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22278 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22279 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22280 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22281 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22282 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22283 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22284 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22285 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22286 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22287 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22288 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22289 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22290 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22291 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22292 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22293 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22294 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22295 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22296 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22297 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22298 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22299 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22300 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22301 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22302 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22303 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22304 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22305 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22306 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22307 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22308 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22309 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22310 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22311 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22312 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22313 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22314 | 2023-04-10 09:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22315 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22316 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22317 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22318 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22319 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22320 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22321 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22322 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22323 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22324 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22325 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22326 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22327 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22328 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22329 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22330 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22331 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22332 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22333 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22334 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22335 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22336 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22337 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22338 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22339 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22340 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22341 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22342 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22343 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22344 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22345 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22346 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22347 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22348 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22349 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22350 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22351 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22352 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22353 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22354 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22355 | 2023-04-10 09:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22356 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22357 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22358 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22359 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22360 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22361 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22362 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22363 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22364 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22365 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22366 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22367 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22368 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22369 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22370 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22371 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22372 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22373 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22374 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22375 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22376 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22377 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22378 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22379 | 2023-04-10 09:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22380 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22381 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22382 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22383 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22384 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22385 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22386 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22387 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22388 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22389 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22390 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 22391 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 22392 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22393 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22394 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22395 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22396 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22397 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22398 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22399 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22400 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22401 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22402 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22403 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22404 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22405 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22406 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22407 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22408 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22409 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22410 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22411 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: NETWORK SERVICE| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22412 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22413 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22414 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22415 | 2023-04-10 09:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22416 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22417 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22418 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22419 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22420 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22421 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22422 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22423 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22424 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22425 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22426 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22427 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22428 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22429 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22430 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22431 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22432 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22433 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22434 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22435 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22436 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22437 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22438 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22439 | 2023-04-10 09:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22440 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22441 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22442 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22443 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22444 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22445 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22446 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22447 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22448 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22449 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22450 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22451 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22452 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22453 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22454 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22455 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22456 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22457 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22458 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22459 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22460 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22461 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22462 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22463 | 2023-04-10 09:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22464 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22465 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22466 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22467 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22468 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22469 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22470 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22471 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22472 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22473 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22474 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22475 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22476 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22477 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22478 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22479 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22480 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22481 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22482 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22483 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22484 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22485 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22486 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22487 | 2023-04-10 08:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22488 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22489 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22490 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22491 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22492 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22493 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22494 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22495 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22496 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22497 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22498 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22499 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22500 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22501 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22502 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22503 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22504 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22505 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22506 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22507 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22508 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22509 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22510 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22511 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22512 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22513 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22514 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22515 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22516 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22517 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22518 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22519 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22520 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22521 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22522 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22523 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22524 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22525 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22526 | 2023-04-10 08:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22527 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22528 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22529 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22530 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22531 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22532 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22533 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22534 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22535 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22536 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22537 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22538 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22539 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22540 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22541 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22542 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22543 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22544 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22545 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22546 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22547 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22548 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22549 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22550 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22551 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22552 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22553 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22554 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22555 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22556 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22557 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22558 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22559 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22560 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22561 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22562 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22563 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22564 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22565 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22566 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22567 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22568 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22569 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22570 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22571 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22572 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22573 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22574 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22575 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22576 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22577 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22578 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22579 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22580 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22581 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22582 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22583 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22584 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22585 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22586 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22587 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22588 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22589 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22590 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22591 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22592 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22593 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22594 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22595 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22596 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22597 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22598 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22599 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22600 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22601 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22602 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22603 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22604 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22605 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22606 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22607 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22608 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22609 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22610 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22611 | 2023-04-10 08:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22612 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22613 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22614 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22615 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22616 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22617 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22618 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22619 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22620 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22621 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22622 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22623 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22624 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22625 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22626 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22627 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22628 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22629 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22630 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22631 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22632 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22633 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22634 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22635 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22636 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22637 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22638 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22639 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22640 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22641 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22642 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22643 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22644 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22645 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22646 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22647 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22648 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22649 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22650 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22651 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22652 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22653 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22654 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22655 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22656 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22657 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22658 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22659 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22660 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22661 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22662 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22663 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22664 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22665 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22666 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22667 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22668 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22669 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22670 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22671 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22672 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22673 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22674 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22675 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22676 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22677 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22678 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 22679 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 22680 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22681 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22682 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22683 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22684 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22685 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22686 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22687 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22688 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22689 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22690 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22691 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22692 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22693 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22694 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22695 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22696 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22697 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22698 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22699 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22700 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22701 | 2023-04-10 08:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22702 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22703 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22704 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22705 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22706 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22707 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22708 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22709 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22710 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22711 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22712 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22713 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22714 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22715 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22716 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22717 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22718 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22719 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22720 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22721 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22722 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22723 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22724 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22725 | 2023-04-10 08:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22726 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22727 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22728 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22729 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22730 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22731 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22732 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22733 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22734 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22735 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22736 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22737 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22738 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22739 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22740 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22741 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22742 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22743 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22744 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22745 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22746 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22747 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22748 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22749 | 2023-04-10 08:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22750 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22751 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22752 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22753 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22754 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22755 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22756 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22757 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22758 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22759 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22760 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22761 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22762 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22763 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22764 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22765 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22766 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22767 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22768 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22769 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22770 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22771 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22772 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22773 | 2023-04-10 08:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22774 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22775 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22776 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22777 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22778 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22779 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22780 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22781 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22782 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22783 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22784 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22785 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22786 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22787 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22788 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22789 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22790 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22791 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22792 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22793 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22794 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22795 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22796 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22797 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22798 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22799 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22800 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22801 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22802 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22803 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22804 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22805 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22806 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22807 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22808 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22809 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22810 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22811 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22812 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22813 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22814 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22815 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22816 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22817 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22818 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22819 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22820 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22821 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22822 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22823 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22824 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22825 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22826 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22827 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22828 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22829 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22830 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22831 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22832 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22833 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22834 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22835 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22836 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22837 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22838 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22839 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22840 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22841 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22842 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22843 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22844 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22845 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22846 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22847 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22848 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22849 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22850 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22851 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 22852 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 22853 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 22854 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 22855 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 22856 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22857 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22858 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 22859 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22860 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22861 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22862 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22863 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22864 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22865 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22866 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22867 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22868 | 2023-04-10 08:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22869 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22870 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22871 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22872 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22873 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22874 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22875 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22876 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22877 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22878 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22879 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22880 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22881 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22882 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22883 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22884 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22885 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22886 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22887 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22888 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22889 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22890 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22891 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22892 | 2023-04-10 08:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22893 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22894 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22895 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22896 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22897 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22898 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22899 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22900 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22901 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22902 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22903 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22904 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22905 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22906 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22907 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22908 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22909 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22910 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22911 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22912 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22913 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22914 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22915 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22916 | 2023-04-10 08:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22917 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22918 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22919 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22920 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22921 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22922 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22923 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22924 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22925 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22926 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22927 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22928 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22929 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22930 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22931 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22932 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22933 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22934 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22935 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22936 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22937 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22938 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22939 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22940 | 2023-04-10 08:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22941 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22942 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22943 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22944 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22945 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22946 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22947 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22948 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22949 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22950 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22951 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22952 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22953 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22954 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22955 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22956 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22957 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22958 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22959 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22960 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22961 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22962 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22963 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22964 | 2023-04-10 08:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22965 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22966 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22967 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22968 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22969 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22970 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22971 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22972 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22973 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22974 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22975 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22976 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22977 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22978 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22979 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22980 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22981 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 22982 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 22983 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22984 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22985 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22986 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22987 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22988 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22989 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22990 | 2023-04-10 08:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22991 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22992 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22993 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22994 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22995 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22996 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22997 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 22998 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 22999 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23000 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23001 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23002 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23003 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23004 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23005 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23006 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23007 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23008 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23009 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23010 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23011 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23012 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23013 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23014 | 2023-04-10 08:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23015 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23016 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23017 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23018 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23019 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23020 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23021 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23022 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23023 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23024 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23025 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23026 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23027 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23028 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23029 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23030 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23031 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23032 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23033 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23034 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23035 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23036 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23037 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23038 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23039 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23040 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23041 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23042 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23043 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23044 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23045 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23046 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23047 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23048 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23049 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23050 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23051 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23052 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23053 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23054 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23055 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23056 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23057 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23058 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23059 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23060 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23061 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23062 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23063 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23064 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23065 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23066 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23067 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23068 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23069 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23070 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23071 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23072 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23073 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23074 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23075 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23076 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23077 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23078 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23079 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23080 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23081 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23082 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23083 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23084 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23085 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23086 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23087 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23088 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23089 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23090 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23091 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23092 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23093 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23094 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23095 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23096 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23097 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23098 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23099 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23100 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23101 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23102 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23103 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23104 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23105 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23106 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23107 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23108 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23109 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23110 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23111 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23112 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23113 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23114 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23115 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23116 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23117 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23118 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23119 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23120 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23121 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23122 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23123 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23124 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23125 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23126 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23127 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23128 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23129 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23130 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23131 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23132 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23133 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23134 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23135 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23136 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23137 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23138 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23139 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23140 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23141 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23142 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23143 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23144 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23145 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23146 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23147 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23148 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23149 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23150 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23151 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23152 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23153 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23154 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23155 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23156 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23157 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23158 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23159 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23160 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23161 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23162 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23163 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23164 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23165 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23166 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23167 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23168 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23169 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23170 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23171 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23172 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23173 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23174 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23175 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23176 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23177 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23178 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23179 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23180 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23181 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23182 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 23388| Process Creation Time: 2023-10-04T12:45:06.111585500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: FOCIPOPKEY_S-1-5-21-1318052574-1909131979-1541577531-1001_sw| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 23183 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: FOCIPOPKEY_S-1-5-21-1318052574-1909131979-1541577531-1001_sw| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23184 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 23388| Process Creation Time: 2023-10-04T12:45:06.111585500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: FOCIPOPKEY_S-1-5-21-1318052574-1909131979-1541577531-1001_sw| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\a26cab42e05cd328c85d71a4391ccfbc_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23185 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23186 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23187 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23188 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23189 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23190 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23191 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23192 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23193 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23194 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23195 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23196 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23197 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23198 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23199 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23200 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23201 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23202 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23203 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23204 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23205 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23206 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23207 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23208 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23209 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23210 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23211 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23212 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23213 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23214 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23215 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23216 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23217 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23218 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23219 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23220 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23221 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23222 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23223 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23224 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23225 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23226 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23227 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23228 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23229 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23230 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23231 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23232 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23233 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23234 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23235 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23236 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23237 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23238 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23239 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23240 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23241 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23242 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23243 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23244 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23245 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23246 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23247 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23248 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23249 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23250 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23251 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23252 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23253 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23254 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23255 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23256 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23257 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23258 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23259 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23260 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23261 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23262 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23263 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23264 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23265 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23266 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23267 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23268 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23269 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23270 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23271 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23272 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23273 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23274 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23275 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23276 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23277 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23278 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23279 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23280 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23281 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23282 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23283 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23284 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23285 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23286 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23287 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23288 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23289 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23290 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23291 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23292 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23293 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23294 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23295 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23296 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23297 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23298 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23299 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23300 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23301 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23302 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23303 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23304 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23305 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23306 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23307 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23308 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23309 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23310 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23311 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23312 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23313 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23314 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23315 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23316 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23317 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23318 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23319 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23320 | 2023-04-10 08:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23321 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23322 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23323 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23324 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23325 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23326 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23327 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23328 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23329 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23330 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23331 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23332 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23333 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23334 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23335 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23336 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23337 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23338 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23339 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23340 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23341 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23342 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23343 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23344 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23345 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23346 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23347 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23348 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23349 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23350 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23351 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23352 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23353 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23354 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23355 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23356 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23357 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23358 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23359 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23360 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23361 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23362 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23363 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23364 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23365 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23366 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23367 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23368 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23369 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23370 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23371 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23372 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23373 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23374 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23375 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23376 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23377 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23378 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23379 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23380 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23381 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23382 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23383 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23384 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23385 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23386 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23387 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23388 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23389 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23390 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23391 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23392 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23393 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23394 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23395 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23396 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23397 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23398 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23399 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23400 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23401 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23402 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23403 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23404 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23405 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23406 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 23407 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 23408 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23409 | 2023-04-10 08:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23410 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23411 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23412 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23413 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23414 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23415 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23416 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23417 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23418 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23419 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23420 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23421 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23422 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23423 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23424 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23425 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23426 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23427 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23428 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23429 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23430 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23431 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23432 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23433 | 2023-04-10 08:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23434 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23435 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23436 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23437 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23438 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23439 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23440 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23441 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23442 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23443 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23444 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23445 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23446 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23447 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23448 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23449 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23450 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23451 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23452 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23453 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23454 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23455 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23456 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23457 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23458 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23459 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23460 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23461 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23462 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23463 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23464 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23465 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23466 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23467 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23468 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23469 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23470 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23471 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23472 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23473 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23474 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23475 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23476 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23477 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23478 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23479 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23480 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23481 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23482 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23483 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23484 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23485 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23486 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23487 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23488 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23489 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23490 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23491 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23492 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23493 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23494 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23495 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23496 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23497 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23498 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23499 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23500 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23501 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23502 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23503 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23504 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23505 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23506 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23507 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23508 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23509 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23510 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23511 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23512 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23513 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23514 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23515 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23516 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23517 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23518 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23519 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23520 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23521 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23522 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23523 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23524 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23525 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23526 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23527 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23528 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23529 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23530 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23531 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23532 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23533 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23534 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23535 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23536 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23537 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23538 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23539 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23540 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23541 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23542 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23543 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23544 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23545 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23546 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23547 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23548 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23549 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23550 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23551 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23552 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23553 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23554 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23555 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23556 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23557 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23558 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23559 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23560 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23561 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23562 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23563 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23564 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23565 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23566 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23567 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23568 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23569 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23570 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23571 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23572 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23573 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23574 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23575 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23576 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23577 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23578 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23579 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23580 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23581 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23582 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23583 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23584 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23585 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23586 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23587 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23588 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23589 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23590 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23591 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23592 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23593 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23594 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23595 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23596 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23597 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23598 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23599 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23600 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23601 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23602 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23603 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23604 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23605 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23606 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23607 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23608 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23609 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23610 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23611 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23612 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23613 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23614 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23615 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23616 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23617 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23618 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23619 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23620 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23621 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23622 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23623 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23624 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23625 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23626 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23627 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23628 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23629 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23630 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23631 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23632 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23633 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23634 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23635 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23636 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23637 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23638 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23639 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23640 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23641 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23642 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23643 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23644 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23645 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23646 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23647 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23648 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23649 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23650 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23651 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23652 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23653 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23654 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23655 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23656 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23657 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23658 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23659 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23660 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23661 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23662 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23663 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23664 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23665 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23666 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23667 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23668 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23669 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23670 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23671 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23672 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23673 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23674 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23675 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23676 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23677 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23678 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23679 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23680 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23681 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23682 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23683 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23684 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23685 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23686 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23687 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23688 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23689 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23690 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23691 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23692 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23693 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23694 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23695 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23696 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23697 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23698 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23699 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23700 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23701 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23702 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23703 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23704 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23705 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23706 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23707 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23708 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23709 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23710 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23711 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23712 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23713 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23714 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23715 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23716 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23717 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23718 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23719 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23720 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23721 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23722 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23723 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23724 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23725 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23726 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23727 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23728 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23729 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23730 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23731 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23732 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23733 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23734 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23735 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23736 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23737 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23738 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23739 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23740 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23741 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23742 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23743 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23744 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23745 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23746 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23747 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23748 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23749 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23750 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23751 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23752 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23753 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23754 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23755 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23756 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23757 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23758 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23759 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23760 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23761 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23762 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23763 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23764 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23765 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23766 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23767 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23768 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23769 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23770 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23771 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23772 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23773 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23774 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23775 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23776 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23777 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23778 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23779 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23780 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23781 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23782 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23783 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23784 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23785 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23786 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23787 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23788 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23789 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23790 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23791 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23792 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23793 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23794 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23795 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23796 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23797 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23798 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23799 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23800 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23801 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23802 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23803 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23804 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23805 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23806 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23807 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23808 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23809 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23810 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23811 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23812 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23813 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23814 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23815 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23816 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23817 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23818 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23819 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23820 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 23821 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 23822 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23823 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23824 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23825 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23826 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23827 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23828 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23829 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23830 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23831 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23832 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23833 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23834 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23835 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23836 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23837 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23838 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23839 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23840 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23841 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23842 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23843 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23844 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23845 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23846 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23847 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23848 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23849 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23850 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23851 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23852 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23853 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23854 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23855 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23856 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23857 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23858 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23859 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23860 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23861 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23862 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23863 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23864 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23865 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23866 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23867 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23868 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23869 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23870 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23871 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23872 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23873 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23874 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23875 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23876 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23877 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23878 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23879 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23880 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23881 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23882 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23883 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23884 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23885 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23886 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23887 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23888 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23889 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23890 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23891 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23892 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23893 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23894 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23895 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23896 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23897 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23898 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23899 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23900 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23901 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23902 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23903 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23904 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23905 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23906 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23907 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23908 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23909 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23910 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23911 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23912 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23913 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23914 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23915 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23916 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 23917 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 23918 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23919 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23920 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23921 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23922 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23923 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23924 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23925 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23926 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23927 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23928 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23929 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x3AD5399||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 23930 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x3AD3D19||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 23931 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x3AD545F||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 23932 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x3AD3D91||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 23933 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x3AD5399||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 23934 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x3AD545F| Linked Logon ID: 0x3AD5399| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 23935 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x3AD5399| Linked Logon ID: 0x3AD545F| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 23936 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 23937 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 23938 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 23939 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 23940 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x3AD3D19||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 23941 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x3AD3D91| Linked Logon ID: 0x3AD3D19| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 23942 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x3AD3D19| Linked Logon ID: 0x3AD3D91| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 23943 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 23944 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 23945 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 23946 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 23947 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23948 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23949 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23950 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23951 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23952 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23953 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23954 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23955 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23956 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23957 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23958 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23959 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23960 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23961 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23962 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23963 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23964 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23965 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23966 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23967 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23968 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23969 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23970 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23971 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23972 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23973 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23974 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23975 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23976 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23977 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23978 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23979 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23980 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23981 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23982 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23983 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23984 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23985 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23986 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23987 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23988 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23989 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23990 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23991 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23992 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23993 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23994 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23995 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23996 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23997 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23998 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 23999 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24000 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24001 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24002 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24003 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24004 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24005 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24006 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24007 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24008 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24009 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24010 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24011 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24012 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24013 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24014 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24015 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24016 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24017 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24018 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24019 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24020 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24021 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24022 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24023 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24024 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24025 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24026 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24027 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24028 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24029 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24030 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24031 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24032 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24033 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24034 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24035 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24036 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24037 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24038 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24039 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24040 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24041 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24042 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24043 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24044 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24045 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24046 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24047 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24048 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24049 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24050 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24051 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24052 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24053 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24054 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24055 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24056 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24057 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24058 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24059 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24060 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24061 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24062 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24063 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24064 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24065 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24066 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24067 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24068 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24069 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24070 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24071 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24072 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24073 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24074 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24075 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24076 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24077 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24078 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24079 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24080 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24081 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24082 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24083 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24084 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24085 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24086 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24087 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24088 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24089 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24090 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24091 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24092 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24093 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24094 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24095 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24096 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24097 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24098 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24099 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24100 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24101 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24102 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24103 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24104 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24105 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x3dfc| Process Name: C:\Windows\System32\LogonUI.exe |
| 24106 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24107 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24108 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24109 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24110 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24111 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24112 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24113 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24114 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24115 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24116 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24117 | 2023-04-10 08:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24118 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24119 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24120 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24121 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24122 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24123 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24124 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24125 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24126 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24127 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24128 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24129 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24130 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24131 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24132 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24133 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24134 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24135 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24136 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24137 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24138 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24139 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24140 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24141 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24142 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24143 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24144 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24145 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24146 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24147 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24148 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24149 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24150 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24151 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24152 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24153 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24154 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24155 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24156 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24157 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24158 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24159 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24160 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24161 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24162 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24163 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24164 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24165 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24166 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24167 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24168 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24169 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24170 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24171 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24172 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24173 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24174 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24175 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24176 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24177 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24178 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24179 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24180 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24181 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24182 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24183 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24184 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24185 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24186 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24187 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24188 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24189 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24190 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24191 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24192 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24193 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24194 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24195 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24196 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24197 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24198 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24199 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24200 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24201 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24202 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24203 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24204 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24205 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24206 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24207 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24208 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24209 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24210 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24211 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24212 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24213 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24214 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24215 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24216 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24217 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24218 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24219 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24220 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24221 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24222 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24223 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24224 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24225 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24226 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24227 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24228 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24229 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24230 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24231 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24232 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24233 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24234 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24235 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24236 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24237 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24238 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24239 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24240 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24241 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24242 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24243 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24244 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24245 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24246 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24247 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24248 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24249 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24250 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24251 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24252 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24253 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24254 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24255 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24256 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24257 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24258 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24259 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24260 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24261 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24262 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24263 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24264 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24265 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24266 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24267 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24268 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24269 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24270 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24271 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24272 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24273 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24274 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24275 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24276 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24277 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24278 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24279 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24280 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24281 | 2023-04-10 04:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24282 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24283 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24284 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24285 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24286 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24287 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24288 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24289 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24290 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24291 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24292 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24293 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24294 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24295 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24296 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24297 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24298 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24299 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24300 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24301 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24302 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24303 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24304 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24305 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24306 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24307 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24308 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24309 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24310 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24311 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24312 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24313 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24314 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24315 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24316 | 2023-04-10 00:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24317 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24318 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24319 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24320 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24321 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24322 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24323 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24324 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24325 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24326 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24327 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24328 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24329 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24330 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24331 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24332 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24333 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24334 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24335 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24336 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24337 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24338 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24339 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24340 | 2023-04-10 00:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24341 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24342 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24343 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24344 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24345 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24346 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24347 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24348 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24349 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24350 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24351 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24352 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24353 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24354 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24355 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24356 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24357 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24358 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24359 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24360 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24361 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24362 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24363 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24364 | 2023-04-10 00:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24365 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24366 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24367 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24368 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24369 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24370 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24371 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24372 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24373 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24374 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24375 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24376 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24377 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24378 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24379 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24380 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24381 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24382 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24383 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24384 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24385 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24386 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24387 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24388 | 2023-04-10 00:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24389 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24390 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24391 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24392 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24393 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24394 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24395 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24396 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24397 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24398 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24399 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24400 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24401 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24402 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24403 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24404 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24405 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24406 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24407 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24408 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24409 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24410 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24411 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24412 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24413 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24414 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24415 | 2023-04-10 00:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24416 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24417 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24418 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24419 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24420 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24421 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24422 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24423 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24424 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24425 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24426 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24427 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24428 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24429 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24430 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24431 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24432 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24433 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24434 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24435 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24436 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24437 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24438 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24439 | 2023-04-10 00:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24440 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24441 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24442 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24443 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24444 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24445 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24446 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24447 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24448 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24449 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24450 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24451 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24452 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24453 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24454 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24455 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24456 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24457 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24458 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24459 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24460 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24461 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24462 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24463 | 2023-04-10 00:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24464 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24465 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24466 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24467 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24468 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24469 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24470 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24471 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24472 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24473 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24474 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24475 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24476 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24477 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24478 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24479 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24480 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24481 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24482 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24483 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24484 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24485 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24486 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24487 | 2023-04-10 00:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24488 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24489 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24490 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24491 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24492 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24493 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24494 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24495 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24496 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24497 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24498 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24499 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24500 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24501 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24502 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24503 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24504 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24505 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24506 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24507 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24508 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24509 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24510 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24511 | 2023-04-10 00:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24512 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24513 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24514 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24515 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24516 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24517 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24518 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24519 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24520 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24521 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24522 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24523 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24524 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24525 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24526 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24527 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24528 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24529 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24530 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24531 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24532 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24533 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24534 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24535 | 2023-04-10 00:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24536 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24537 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24538 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24539 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24540 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24541 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24542 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24543 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24544 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24545 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24546 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24547 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24548 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24549 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24550 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24551 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24552 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24553 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24554 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24555 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24556 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24557 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24558 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24559 | 2023-04-10 00:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24560 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24561 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24562 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24563 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24564 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24565 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24566 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24567 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24568 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24569 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24570 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24571 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24572 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24573 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24574 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24575 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24576 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24577 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24578 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24579 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24580 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24581 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24582 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24583 | 2023-04-10 00:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24584 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24585 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24586 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24587 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24588 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24589 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24590 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24591 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24592 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24593 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24594 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24595 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24596 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24597 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24598 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24599 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24600 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24601 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24602 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24603 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24604 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24605 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24606 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24607 | 2023-04-10 00:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24608 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24609 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24610 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24611 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24612 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24613 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24614 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24615 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24616 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24617 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24618 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24619 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24620 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24621 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24622 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24623 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24624 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24625 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24626 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 24627 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24628 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24629 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24630 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24631 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24632 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24633 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24634 | 2023-04-10 00:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24635 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24636 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24637 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24638 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24639 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24640 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24641 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24642 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24643 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24644 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24645 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 24646 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 24647 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24648 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24649 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24650 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24651 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24652 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24653 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24654 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24655 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24656 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24657 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24658 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24659 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24660 | 2023-04-10 00:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24661 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24662 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24663 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24664 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24665 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24666 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24667 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24668 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24669 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24670 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24671 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24672 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24673 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24674 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24675 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24676 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24677 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24678 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24679 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24680 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24681 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24682 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24683 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24684 | 2023-04-10 00:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24685 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24686 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24687 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24688 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24689 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24690 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24691 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24692 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24693 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24694 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24695 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24696 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24697 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24698 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24699 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24700 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24701 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24702 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24703 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24704 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24705 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24706 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24707 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24708 | 2023-04-10 00:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24709 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24710 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24711 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24712 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24713 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24714 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24715 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24716 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24717 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24718 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24719 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24720 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24721 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24722 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24723 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24724 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24725 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24726 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24727 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24728 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24729 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24730 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24731 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24732 | 2023-04-10 00:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24733 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24734 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24735 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24736 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24737 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24738 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24739 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24740 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24741 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24742 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24743 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24744 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24745 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24746 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24747 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24748 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24749 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24750 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24751 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24752 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24753 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24754 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24755 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24756 | 2023-04-10 00:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24757 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24758 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24759 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24760 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24761 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24762 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24763 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24764 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24765 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24766 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24767 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24768 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24769 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24770 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24771 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24772 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24773 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24774 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24775 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24776 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24777 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24778 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24779 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24780 | 2023-04-10 00:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24781 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24782 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24783 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24784 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24785 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24786 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24787 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24788 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24789 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24790 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24791 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24792 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24793 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24794 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24795 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24796 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24797 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24798 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24799 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24800 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24801 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24802 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24803 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24804 | 2023-04-10 00:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24805 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24806 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24807 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24808 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24809 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24810 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24811 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24812 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24813 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24814 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24815 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24816 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24817 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24818 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24819 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24820 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24821 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24822 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24823 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24824 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24825 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24826 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24827 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24828 | 2023-04-10 00:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24829 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24830 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24831 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24832 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24833 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24834 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24835 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24836 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24837 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24838 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24839 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24840 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24841 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24842 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24843 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24844 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24845 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24846 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24847 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24848 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24849 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24850 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24851 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24852 | 2023-04-10 00:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24853 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24854 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24855 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24856 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24857 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24858 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24859 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24860 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24861 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24862 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24863 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24864 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24865 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24866 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24867 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24868 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24869 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24870 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24871 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24872 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24873 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24874 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24875 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24876 | 2023-04-10 00:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24877 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24878 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24879 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24880 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24881 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24882 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24883 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24884 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24885 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24886 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24887 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24888 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24889 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24890 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24891 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24892 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24893 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24894 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24895 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24896 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24897 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24898 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24899 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24900 | 2023-04-10 00:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24901 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24902 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24903 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24904 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24905 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24906 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24907 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24908 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24909 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24910 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24911 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24912 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24913 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24914 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24915 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24916 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24917 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24918 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24919 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24920 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24921 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24922 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24923 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24924 | 2023-04-10 00:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24925 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24926 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24927 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24928 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24929 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24930 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24931 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24932 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24933 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24934 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24935 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24936 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24937 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24938 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24939 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24940 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24941 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24942 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24943 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24944 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24945 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24946 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24947 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24948 | 2023-04-10 00:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24949 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24950 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24951 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24952 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24953 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24954 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24955 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24956 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24957 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24958 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24959 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24960 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24961 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24962 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24963 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24964 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24965 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24966 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24967 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24968 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24969 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24970 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24971 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24972 | 2023-04-10 00:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24973 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24974 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24975 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24976 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24977 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24978 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24979 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24980 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24981 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24982 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24983 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24984 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24985 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24986 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24987 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24988 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24989 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24990 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24991 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24992 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24993 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24994 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24995 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24996 | 2023-04-10 00:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24997 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 24998 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 24999 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25000 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25001 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25002 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25003 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25004 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25005 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25006 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25007 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25008 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25009 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25010 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25011 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25012 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25013 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25014 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25015 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25016 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25017 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25018 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25019 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25020 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25021 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25022 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25023 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25024 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25025 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25026 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25027 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25028 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25029 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25030 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25031 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25032 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25033 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25034 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25035 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25036 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25037 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25038 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25039 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25040 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25041 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25042 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25043 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25044 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25045 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25046 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25047 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25048 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25049 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25050 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25051 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25052 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25053 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25054 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25055 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25056 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25057 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25058 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25059 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25060 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25061 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25062 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25063 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25064 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25065 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25066 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25067 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25068 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25069 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25070 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25071 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25072 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25073 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25074 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25075 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25076 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25077 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25078 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25079 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25080 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25081 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25082 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25083 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25084 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25085 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25086 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25087 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25088 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25089 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25090 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25091 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25092 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25093 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25094 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25095 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25096 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25097 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25098 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25099 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25100 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25101 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25102 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25103 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25104 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x3dfc| Process Name: C:\Windows\System32\LogonUI.exe |
| 25105 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25106 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25107 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25108 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25109 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25110 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25111 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25112 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25113 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25114 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25115 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25116 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25117 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25118 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25119 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25120 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25121 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25122 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25123 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25124 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25125 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25126 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25127 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25128 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25129 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25130 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25131 | 2023-04-10 00:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25132 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25133 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25134 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25135 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25136 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25137 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25138 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25139 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25140 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25141 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25142 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25143 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25144 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25145 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25146 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25147 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25148 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25149 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25150 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25151 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25152 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25153 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25154 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25155 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25156 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25157 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25158 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25159 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25160 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25161 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25162 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25163 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25164 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25165 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25166 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25167 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25168 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25169 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25170 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25171 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25172 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25173 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25174 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25175 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25176 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25177 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25178 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25179 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25180 | 2023-04-10 00:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25181 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25182 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25183 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25184 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25185 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25186 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25187 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25188 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25189 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25190 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25191 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25192 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25193 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25194 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25195 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25196 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25197 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25198 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25199 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25200 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25201 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25202 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25203 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25204 | 2023-04-10 00:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25205 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25206 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25207 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25208 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25209 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25210 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25211 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25212 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25213 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25214 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25215 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25216 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25217 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25218 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25219 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25220 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25221 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25222 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25223 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25224 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25225 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25226 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25227 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25228 | 2023-04-10 00:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25229 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25230 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25231 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25232 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25233 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25234 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25235 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25236 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25237 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25238 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25239 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25240 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25241 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25242 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25243 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25244 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25245 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25246 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25247 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25248 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25249 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25250 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25251 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25252 | 2023-04-10 00:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25253 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25254 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25255 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25256 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25257 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25258 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25259 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25260 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25261 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25262 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25263 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25264 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25265 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25266 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25267 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25268 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25269 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25270 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25271 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25272 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25273 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 4616 | Security State Change | The system time was changed.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 0x4f8c| Name: C:\Windows\System32\svchost.exe||Previous Time: 2023-10-04T04:22:12.326097800Z|New Time: 2023-10-04T04:22:12.326108200Z||This event is generated when the system time is changed. It is normal for the Windows Time Service, which runs with System privilege, to change the system time on a regular basis. Other system time changes may be indicative of attempts to tamper with the computer. |
| 25274 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 4616 | Security State Change | The system time was changed.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 0x4f8c| Name: C:\Windows\System32\svchost.exe||Previous Time: 2023-10-04T04:22:12.324616500Z|New Time: 2023-10-04T04:22:12.324716700Z||This event is generated when the system time is changed. It is normal for the Windows Time Service, which runs with System privilege, to change the system time on a regular basis. Other system time changes may be indicative of attempts to tamper with the computer. |
| 25275 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 4616 | Security State Change | The system time was changed.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 0x4f8c| Name: C:\Windows\System32\svchost.exe||Previous Time: 2023-10-04T04:22:11.101278500Z|New Time: 2023-10-04T04:22:12.323246900Z||This event is generated when the system time is changed. It is normal for the Windows Time Service, which runs with System privilege, to change the system time on a regular basis. Other system time changes may be indicative of attempts to tamper with the computer. |
| 25276 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25277 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25278 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25279 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25280 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25281 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25282 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25283 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25284 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25285 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25286 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25287 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25288 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25289 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25290 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25291 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25292 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25293 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25294 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25295 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25296 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25297 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25298 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25299 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25300 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25301 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25302 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25303 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25304 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25305 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25306 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25307 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25308 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25309 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25310 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25311 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25312 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25313 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25314 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25315 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25316 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25317 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25318 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25319 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25320 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25321 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25322 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25323 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25324 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25325 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25326 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25327 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25328 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25329 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25330 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25331 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25332 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25333 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25334 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25335 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25336 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25337 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25338 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25339 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25340 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25341 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25342 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25343 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25344 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25345 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25346 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25347 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25348 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25349 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25350 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25351 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25352 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25353 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25354 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25355 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25356 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25357 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25358 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25359 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25360 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25361 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25362 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25363 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25364 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25365 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25366 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25367 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25368 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25369 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25370 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25371 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25372 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25373 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25374 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25375 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25376 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25377 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25378 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25379 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25380 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25381 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25382 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25383 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25384 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25385 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25386 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25387 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25388 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25389 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25390 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25391 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25392 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25393 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25394 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25395 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25396 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25397 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25398 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25399 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25400 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25401 | 2023-04-10 00:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25402 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25403 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25404 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25405 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25406 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25407 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25408 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25409 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25410 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25411 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25412 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25413 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25414 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25415 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25416 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25417 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25418 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25419 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25420 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25421 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25422 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25423 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25424 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25425 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25426 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25427 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25428 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25429 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25430 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25431 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25432 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25433 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25434 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25435 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25436 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25437 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25438 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25439 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25440 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25441 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25442 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25443 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25444 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25445 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25446 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25447 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25448 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25449 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25450 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25451 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25452 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25453 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25454 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25455 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25456 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25457 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25458 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25459 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25460 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25461 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25462 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25463 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25464 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25465 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25466 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25467 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25468 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCAD4| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25469 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25470 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25471 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25472 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25473 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25474 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25475 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25476 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25477 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25478 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25479 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25480 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25481 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25482 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25483 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25484 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25485 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25486 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25487 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25488 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25489 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25490 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25491 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25492 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25493 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25494 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25495 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25496 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25497 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25498 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25499 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25500 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25501 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25502 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25503 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25504 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25505 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25506 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25507 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25508 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25509 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25510 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25511 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25512 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25513 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25514 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25515 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25516 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25517 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25518 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25519 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25520 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25521 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25522 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25523 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25524 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25525 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25526 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25527 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25528 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25529 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25530 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25531 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25532 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25533 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25534 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25535 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25536 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25537 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25538 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25539 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25540 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25541 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25542 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25543 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25544 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25545 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25546 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25547 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25548 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25549 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25550 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25551 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25552 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25553 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25554 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25555 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25556 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25557 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25558 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25559 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25560 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25561 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25562 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25563 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25564 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25565 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25566 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25567 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25568 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25569 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25570 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25571 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25572 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25573 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25574 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25575 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25576 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25577 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25578 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25579 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25580 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25581 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25582 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25583 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25584 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25585 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25586 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25587 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25588 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25589 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25590 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25591 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25592 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25593 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25594 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25595 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25596 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25597 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 25598 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25599 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25600 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25601 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25602 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25603 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25604 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25605 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25606 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25607 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25608 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25609 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25610 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25611 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25612 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25613 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25614 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25615 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25616 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25617 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25618 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25619 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25620 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25621 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25622 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25623 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25624 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25625 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25626 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25627 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25628 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25629 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25630 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25631 | 2023-04-10 00:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25632 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25633 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25634 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25635 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25636 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25637 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25638 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25639 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25640 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25641 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25642 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25643 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25644 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25645 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25646 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25647 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25648 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25649 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25650 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25651 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25652 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25653 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25654 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25655 | 2023-04-10 00:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25656 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25657 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25658 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25659 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25660 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25661 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25662 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25663 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25664 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25665 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25666 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25667 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25668 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25669 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25670 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25671 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25672 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25673 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25674 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25675 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25676 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25677 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25678 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25679 | 2023-04-10 00:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25680 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25681 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25682 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25683 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25684 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25685 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25686 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25687 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25688 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25689 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25690 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25691 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25692 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25693 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25694 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25695 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25696 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25697 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25698 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25699 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25700 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25701 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25702 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25703 | 2023-04-10 00:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25704 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25705 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25706 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25707 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25708 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25709 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25710 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25711 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25712 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25713 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25714 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25715 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25716 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25717 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25718 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25719 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25720 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25721 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25722 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25723 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25724 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25725 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25726 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25727 | 2023-04-10 00:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25728 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25729 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25730 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25731 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25732 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25733 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25734 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25735 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25736 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25737 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25738 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25739 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25740 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25741 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25742 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25743 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25744 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25745 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25746 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25747 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25748 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25749 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25750 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25751 | 2023-04-10 00:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25752 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25753 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25754 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25755 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25756 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25757 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25758 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25759 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25760 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25761 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25762 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25763 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25764 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25765 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25766 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25767 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25768 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25769 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25770 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25771 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25772 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25773 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25774 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25775 | 2023-04-10 00:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25776 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25777 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25778 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25779 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25780 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25781 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25782 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25783 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25784 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25785 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25786 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25787 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25788 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25789 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25790 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25791 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25792 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25793 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25794 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25795 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25796 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25797 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25798 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25799 | 2023-04-10 00:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25800 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25801 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25802 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25803 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25804 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25805 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25806 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25807 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25808 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25809 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25810 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25811 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25812 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25813 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25814 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25815 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25816 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25817 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25818 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25819 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25820 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25821 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25822 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25823 | 2023-04-10 00:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25824 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25825 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25826 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25827 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25828 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25829 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25830 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25831 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25832 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25833 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25834 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25835 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25836 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25837 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25838 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25839 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25840 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25841 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25842 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25843 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25844 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25845 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25846 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25847 | 2023-04-10 00:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25848 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25849 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25850 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25851 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25852 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25853 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25854 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25855 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25856 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25857 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25858 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25859 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25860 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25861 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25862 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25863 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25864 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25865 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25866 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25867 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25868 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25869 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25870 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25871 | 2023-04-10 00:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25872 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25873 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25874 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25875 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25876 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25877 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25878 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25879 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25880 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25881 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25882 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25883 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25884 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25885 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25886 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25887 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25888 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25889 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25890 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25891 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25892 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25893 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25894 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25895 | 2023-04-10 00:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25896 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25897 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25898 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25899 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25900 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25901 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25902 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25903 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25904 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25905 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25906 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25907 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25908 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25909 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25910 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25911 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25912 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25913 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25914 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25915 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25916 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25917 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25918 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25919 | 2023-04-10 00:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25920 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25921 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25922 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25923 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25924 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 25925 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 25926 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25927 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25928 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25929 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25930 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25931 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25932 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25933 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25934 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25935 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25936 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25937 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25938 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25939 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25940 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25941 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25942 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25943 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25944 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25945 | 2023-04-10 00:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25946 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25947 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25948 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25949 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25950 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25951 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25952 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25953 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25954 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25955 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25956 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25957 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25958 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25959 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25960 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25961 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25962 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25963 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25964 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25965 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25966 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25967 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25968 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25969 | 2023-04-10 00:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25970 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25971 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25972 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25973 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25974 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25975 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25976 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25977 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25978 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25979 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25980 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25981 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25982 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25983 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25984 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25985 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25986 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25987 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25988 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25989 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25990 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25991 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25992 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25993 | 2023-04-10 00:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25994 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25995 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25996 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25997 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 25998 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 25999 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26000 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26001 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26002 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26003 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26004 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26005 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26006 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26007 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26008 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26009 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26010 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26011 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26012 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26013 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26014 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26015 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26016 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26017 | 2023-04-10 00:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26018 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26019 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26020 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26021 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26022 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26023 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26024 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26025 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26026 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26027 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26028 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26029 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26030 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26031 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26032 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26033 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26034 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26035 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26036 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26037 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26038 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26039 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26040 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26041 | 2023-04-10 00:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26042 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26043 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26044 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26045 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26046 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26047 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26048 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26049 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26050 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26051 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26052 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26053 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26054 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26055 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26056 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26057 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26058 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26059 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26060 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26061 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26062 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26063 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26064 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26065 | 2023-04-10 00:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26066 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26067 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26068 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26069 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26070 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26071 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26072 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26073 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26074 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26075 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26076 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26077 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26078 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26079 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26080 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26081 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26082 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26083 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26084 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26085 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26086 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26087 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26088 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26089 | 2023-04-10 00:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26090 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26091 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26092 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26093 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26094 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26095 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26096 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26097 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26098 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26099 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26100 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26101 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26102 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26103 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26104 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26105 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26106 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26107 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26108 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26109 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26110 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26111 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26112 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26113 | 2023-04-10 00:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26114 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26115 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26116 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26117 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26118 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26119 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26120 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26121 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26122 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26123 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26124 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26125 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26126 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26127 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26128 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26129 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26130 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26131 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26132 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26133 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26134 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26135 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26136 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26137 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26138 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 26139 | 2023-04-10 00:00:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 26140 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26141 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26142 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26143 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26144 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26145 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26146 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26147 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26148 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26149 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26150 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26151 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26152 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26153 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26154 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26155 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26156 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26157 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26158 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26159 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26160 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26161 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26162 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26163 | 2023-03-10 23:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26164 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26165 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26166 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26167 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26168 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26169 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26170 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26171 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26172 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26173 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26174 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26175 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26176 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26177 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26178 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26179 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26180 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26181 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26182 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26183 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26184 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26185 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26186 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26187 | 2023-03-10 23:58:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26188 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26189 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26190 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26191 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26192 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26193 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26194 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26195 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26196 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26197 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26198 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26199 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26200 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26201 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26202 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26203 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26204 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26205 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26206 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26207 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26208 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26209 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26210 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26211 | 2023-03-10 23:57:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26212 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26213 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26214 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26215 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26216 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26217 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26218 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26219 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26220 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26221 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26222 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26223 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26224 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26225 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26226 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26227 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26228 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26229 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26230 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26231 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26232 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26233 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26234 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26235 | 2023-03-10 23:56:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26236 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26237 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26238 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26239 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26240 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26241 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26242 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26243 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26244 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26245 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26246 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26247 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26248 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26249 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26250 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26251 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26252 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26253 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26254 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26255 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26256 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26257 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26258 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26259 | 2023-03-10 23:55:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26260 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26261 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26262 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26263 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26264 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26265 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26266 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26267 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26268 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26269 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26270 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26271 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26272 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26273 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26274 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26275 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26276 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26277 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26278 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26279 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26280 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26281 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26282 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26283 | 2023-03-10 23:54:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26284 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26285 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26286 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26287 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26288 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 26289 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 26290 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26291 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26292 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26293 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26294 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26295 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26296 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26297 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26298 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26299 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26300 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26301 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26302 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26303 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26304 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26305 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26306 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26307 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26308 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26309 | 2023-03-10 23:53:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26310 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26311 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26312 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26313 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26314 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26315 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26316 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26317 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26318 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26319 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26320 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26321 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26322 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26323 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26324 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26325 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26326 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26327 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26328 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26329 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26330 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26331 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26332 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26333 | 2023-03-10 23:52:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26334 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26335 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26336 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26337 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26338 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26339 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26340 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26341 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26342 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26343 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26344 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26345 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26346 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26347 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26348 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26349 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26350 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26351 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26352 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26353 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26354 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26355 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26356 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26357 | 2023-03-10 23:51:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26358 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26359 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26360 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26361 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26362 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26363 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26364 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26365 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26366 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26367 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26368 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26369 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26370 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26371 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26372 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26373 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26374 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26375 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26376 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26377 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26378 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26379 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26380 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26381 | 2023-03-10 23:50:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26382 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26383 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26384 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26385 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26386 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26387 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26388 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26389 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26390 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26391 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26392 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26393 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26394 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26395 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26396 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26397 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26398 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26399 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26400 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26401 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26402 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26403 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26404 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26405 | 2023-03-10 23:49:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26406 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26407 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26408 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26409 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26410 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26411 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26412 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26413 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26414 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26415 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26416 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26417 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26418 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26419 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26420 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26421 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26422 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26423 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26424 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26425 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26426 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26427 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26428 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26429 | 2023-03-10 23:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26430 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26431 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26432 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26433 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26434 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26435 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26436 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26437 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26438 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26439 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26440 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26441 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26442 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26443 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26444 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26445 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26446 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26447 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26448 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26449 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26450 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26451 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26452 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26453 | 2023-03-10 23:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26454 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26455 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26456 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26457 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26458 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26459 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26460 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26461 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26462 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26463 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26464 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26465 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26466 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26467 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26468 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26469 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26470 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26471 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26472 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 26473 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 26474 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26475 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26476 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26477 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26478 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26479 | 2023-03-10 23:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26480 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26481 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26482 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26483 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26484 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26485 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26486 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26487 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26488 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26489 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26490 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26491 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26492 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26493 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26494 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26495 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26496 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26497 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26498 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26499 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26500 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26501 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26502 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26503 | 2023-03-10 23:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26504 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26505 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26506 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26507 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26508 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26509 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26510 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26511 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26512 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26513 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26514 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26515 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26516 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26517 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26518 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26519 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26520 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26521 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26522 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26523 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26524 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26525 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26526 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26527 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26528 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26529 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26530 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26531 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26532 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26533 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26534 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26535 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26536 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26537 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26538 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26539 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26540 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26541 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26542 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26543 | 2023-03-10 23:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26544 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26545 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26546 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26547 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26548 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26549 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26550 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26551 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26552 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26553 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26554 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26555 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26556 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26557 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26558 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26559 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26560 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26561 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26562 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26563 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26564 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26565 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26566 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26567 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26568 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26569 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26570 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26571 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26572 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26573 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26574 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26575 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26576 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26577 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26578 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26579 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26580 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26581 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26582 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26583 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26584 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26585 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26586 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26587 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26588 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26589 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26590 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26591 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26592 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26593 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26594 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26595 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26596 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26597 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26598 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26599 | 2023-03-10 23:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26600 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26601 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26602 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26603 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26604 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26605 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26606 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26607 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26608 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26609 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26610 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26611 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26612 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26613 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26614 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26615 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26616 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26617 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26618 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26619 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26620 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26621 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26622 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26623 | 2023-03-10 23:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26624 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26625 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26626 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26627 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26628 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26629 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26630 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26631 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26632 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26633 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26634 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26635 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26636 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26637 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26638 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26639 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26640 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26641 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26642 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26643 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26644 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26645 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26646 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26647 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26648 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26649 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26650 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26651 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26652 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26653 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26654 | 2023-03-10 23:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26655 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26656 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26657 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26658 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26659 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26660 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26661 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26662 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26663 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26664 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26665 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26666 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26667 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26668 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26669 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26670 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26671 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26672 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26673 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26674 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26675 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26676 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26677 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26678 | 2023-03-10 23:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26679 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26680 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26681 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26682 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26683 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26684 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26685 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26686 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26687 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26688 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26689 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26690 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26691 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26692 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26693 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26694 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26695 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26696 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26697 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26698 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26699 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26700 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26701 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26702 | 2023-03-10 23:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26703 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26704 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26705 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 26706 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 26707 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26708 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26709 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 26710 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 26711 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26712 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26713 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26714 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26715 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26716 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26717 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26718 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26719 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26720 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26721 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26722 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26723 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26724 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26725 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26726 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26727 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26728 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26729 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26730 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26731 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26732 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26733 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26734 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 26735 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 26736 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 26737 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26738 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26739 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26740 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26741 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26742 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26743 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26744 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26745 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26746 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26747 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26748 | 2023-03-10 23:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26749 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26750 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26751 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26752 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26753 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26754 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26755 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26756 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26757 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26758 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26759 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26760 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26761 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26762 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26763 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26764 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26765 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26766 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26767 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26768 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26769 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26770 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26771 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26772 | 2023-03-10 23:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26773 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26774 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26775 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26776 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26777 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26778 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26779 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26780 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26781 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26782 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26783 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26784 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26785 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26786 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26787 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26788 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26789 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26790 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26791 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26792 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26793 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26794 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26795 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26796 | 2023-03-10 23:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26797 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26798 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26799 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26800 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26801 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26802 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26803 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26804 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26805 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26806 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26807 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26808 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26809 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26810 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26811 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26812 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26813 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26814 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26815 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26816 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26817 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26818 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26819 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26820 | 2023-03-10 23:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26821 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26822 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26823 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26824 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26825 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26826 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26827 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26828 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26829 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26830 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26831 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26832 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26833 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26834 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26835 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26836 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26837 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26838 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26839 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26840 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26841 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26842 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26843 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26844 | 2023-03-10 23:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26845 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26846 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26847 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26848 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26849 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26850 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26851 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26852 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26853 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26854 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26855 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26856 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26857 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26858 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26859 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26860 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26861 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26862 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26863 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26864 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26865 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26866 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26867 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26868 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 26869 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 26870 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26871 | 2023-03-10 23:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26872 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26873 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26874 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26875 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26876 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26877 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26878 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26879 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26880 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26881 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26882 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26883 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26884 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26885 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26886 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26887 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26888 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26889 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26890 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26891 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26892 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26893 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26894 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26895 | 2023-03-10 23:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26896 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26897 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26898 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26899 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26900 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26901 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26902 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26903 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26904 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26905 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26906 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26907 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26908 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26909 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26910 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26911 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26912 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26913 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26914 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26915 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26916 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26917 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26918 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26919 | 2023-03-10 23:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26920 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26921 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26922 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26923 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26924 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26925 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26926 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26927 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26928 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26929 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26930 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26931 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26932 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26933 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26934 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26935 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26936 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26937 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26938 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26939 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26940 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26941 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26942 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26943 | 2023-03-10 23:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26944 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26945 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26946 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26947 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26948 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26949 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26950 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26951 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26952 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26953 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26954 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26955 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26956 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26957 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26958 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26959 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26960 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26961 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26962 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26963 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26964 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26965 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26966 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26967 | 2023-03-10 23:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26968 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26969 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26970 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26971 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26972 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26973 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26974 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26975 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26976 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26977 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26978 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26979 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26980 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26981 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26982 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26983 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26984 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26985 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26986 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26987 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26988 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26989 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26990 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26991 | 2023-03-10 23:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26992 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26993 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26994 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26995 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26996 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26997 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 26998 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 26999 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27000 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27001 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27002 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27003 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27004 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27005 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27006 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27007 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27008 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27009 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27010 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27011 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27012 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27013 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27014 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27015 | 2023-03-10 23:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27016 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27017 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27018 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27019 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27020 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27021 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27022 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27023 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27024 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27025 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27026 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27027 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27028 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27029 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27030 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27031 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27032 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27033 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27034 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27035 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27036 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27037 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27038 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27039 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27040 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27041 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27042 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27043 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27044 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27045 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27046 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27047 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27048 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27049 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27050 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27051 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27052 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27053 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27054 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27055 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27056 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27057 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27058 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27059 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27060 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27061 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27062 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27063 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27064 | 2023-03-10 23:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27065 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27066 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27067 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27068 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27069 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27070 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27071 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27072 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27073 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27074 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27075 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27076 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27077 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27078 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27079 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27080 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27081 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27082 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27083 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27084 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27085 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27086 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27087 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27088 | 2023-03-10 23:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27089 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27090 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27091 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27092 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27093 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27094 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27095 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27096 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27097 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27098 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27099 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27100 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27101 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27102 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27103 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27104 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27105 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27106 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27107 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27108 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27109 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27110 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27111 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27112 | 2023-03-10 23:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27113 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27114 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27115 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27116 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27117 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27118 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27119 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27120 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27121 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27122 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27123 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27124 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27125 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27126 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27127 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27128 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27129 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27130 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27131 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27132 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27133 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27134 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27135 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27136 | 2023-03-10 23:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27137 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27138 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27139 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27140 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27141 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27142 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27143 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27144 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27145 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27146 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27147 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27148 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27149 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27150 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27151 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27152 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27153 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27154 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27155 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27156 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27157 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27158 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27159 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27160 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27161 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27162 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27163 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27164 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27165 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27166 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27167 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27168 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27169 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27170 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27171 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27172 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27173 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27174 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27175 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27176 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27177 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27178 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27179 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27180 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27181 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27182 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27183 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27184 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27185 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27186 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27187 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27188 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27189 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27190 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27191 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27192 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27193 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27194 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27195 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27196 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27197 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_api.application| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27198 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27199 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_office.net| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27200 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27201 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27202 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27203 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27204 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27205 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27206 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27207 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27208 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27209 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27210 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27211 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27212 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27213 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27214 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27215 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27216 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27217 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27218 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27219 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27220 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27221 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27222 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27223 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27224 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27225 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27226 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27227 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27228 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27229 | 2023-03-10 23:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27230 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27231 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27232 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27233 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27234 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27235 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27236 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27237 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27238 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27239 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27240 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27241 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27242 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27243 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27244 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27245 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27246 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27247 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27248 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27249 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27250 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27251 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27252 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27253 | 2023-03-10 23:21:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27254 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27255 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27256 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27257 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27258 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27259 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27260 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27261 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27262 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27263 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27264 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27265 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27266 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27267 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27268 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27269 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27270 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27271 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27272 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27273 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27274 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27275 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27276 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27277 | 2023-03-10 23:20:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27278 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27279 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27280 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27281 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27282 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27283 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27284 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27285 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27286 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27287 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27288 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27289 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27290 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27291 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27292 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27293 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27294 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27295 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27296 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27297 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27298 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27299 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27300 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27301 | 2023-03-10 23:19:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27302 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27303 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27304 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27305 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27306 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27307 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27308 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27309 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27310 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27311 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27312 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27313 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27314 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27315 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27316 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27317 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27318 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27319 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27320 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27321 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27322 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27323 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27324 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27325 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27326 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27327 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27328 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27329 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27330 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27331 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27332 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27333 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27334 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27335 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27336 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27337 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27338 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27339 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27340 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27341 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27342 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27343 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27344 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27345 | 2023-03-10 23:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27346 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27347 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27348 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27349 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27350 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27351 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27352 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27353 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27354 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27355 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27356 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27357 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27358 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27359 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27360 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27361 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27362 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27363 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27364 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27365 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27366 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27367 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27368 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27369 | 2023-03-10 23:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27370 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27371 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27372 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27373 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27374 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27375 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27376 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27377 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27378 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27379 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27380 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27381 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27382 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27383 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27384 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27385 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27386 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27387 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27388 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27389 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27390 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27391 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27392 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27393 | 2023-03-10 23:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27394 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27395 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27396 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27397 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27398 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27399 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27400 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27401 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27402 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27403 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27404 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27405 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27406 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27407 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27408 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27409 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27410 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27411 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27412 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27413 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27414 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27415 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27416 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27417 | 2023-03-10 23:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27418 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27419 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27420 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27421 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27422 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27423 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27424 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27425 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27426 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27427 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27428 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27429 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27430 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27431 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27432 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27433 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27434 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27435 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27436 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27437 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27438 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27439 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27440 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27441 | 2023-03-10 23:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27442 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27443 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27444 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27445 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27446 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27447 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27448 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27449 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27450 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27451 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27452 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27453 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27454 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27455 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27456 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27457 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27458 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27459 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27460 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27461 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27462 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27463 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27464 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27465 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27466 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27467 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27468 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27469 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27470 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27471 | 2023-03-10 23:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27472 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27473 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27474 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27475 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27476 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27477 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27478 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27479 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27480 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27481 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27482 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27483 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27484 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27485 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27486 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27487 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27488 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27489 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27490 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27491 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27492 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27493 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27494 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27495 | 2023-03-10 23:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27496 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27497 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27498 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27499 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27500 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27501 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27502 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27503 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27504 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27505 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27506 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27507 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27508 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27509 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27510 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27511 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27512 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27513 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27514 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27515 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27516 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27517 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27518 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27519 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27520 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27521 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27522 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27523 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27524 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27525 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27526 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27527 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27528 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27529 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27530 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27531 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27532 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27533 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27534 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27535 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27536 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27537 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27538 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27539 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27540 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27541 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27542 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27543 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27544 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27545 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27546 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27547 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27548 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27549 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27550 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27551 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27552 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27553 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27554 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27555 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27556 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27557 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27558 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27559 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27560 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27561 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27562 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27563 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27564 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27565 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27566 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27567 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27568 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27569 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27570 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27571 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27572 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27573 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27574 | 2023-03-10 23:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27575 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27576 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27577 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27578 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27579 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27580 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27581 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27582 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27583 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27584 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27585 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27586 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27587 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27588 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27589 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27590 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27591 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27592 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27593 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27594 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27595 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27596 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27597 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27598 | 2023-03-10 23:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27599 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27600 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27601 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27602 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27603 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27604 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27605 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27606 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27607 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27608 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27609 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27610 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27611 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27612 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27613 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27614 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27615 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27616 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27617 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27618 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27619 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27620 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27621 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27622 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27623 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27624 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27625 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27626 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27627 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27628 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27629 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27630 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27631 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27632 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27633 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27634 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27635 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27636 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27637 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27638 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27639 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27640 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27641 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27642 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27643 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27644 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27645 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27646 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27647 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27648 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27649 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27650 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27651 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27652 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27653 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27654 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27655 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27656 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27657 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27658 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27659 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27660 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27661 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27662 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27663 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27664 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27665 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27666 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27667 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27668 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27669 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27670 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27671 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27672 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27673 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27674 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27675 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27676 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27677 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27678 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27679 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27680 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27681 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27682 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27683 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27684 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27685 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27686 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27687 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27688 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27689 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27690 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27691 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27692 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27693 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27694 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27695 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27696 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27697 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27698 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27699 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27700 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27701 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27702 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27703 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27704 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27705 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27706 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27707 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27708 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27709 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27710 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27711 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27712 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27713 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27714 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27715 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27716 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27717 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27718 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27719 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27720 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27721 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27722 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27723 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27724 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27725 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27726 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27727 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27728 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27729 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27730 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27731 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27732 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27733 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27734 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27735 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27736 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27737 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27738 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27739 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27740 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27741 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27742 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27743 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27744 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27745 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27746 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27747 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27748 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27749 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27750 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27751 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27752 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27753 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27754 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27755 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27756 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27757 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27758 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27759 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27760 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27761 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27762 | 2023-03-10 23:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27763 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27764 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27765 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27766 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27767 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27768 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27769 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27770 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27771 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27772 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27773 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27774 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27775 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27776 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27777 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27778 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27779 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27780 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27781 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27782 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27783 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27784 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27785 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27786 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27787 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27788 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27789 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27790 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27791 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27792 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27793 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27794 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27795 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27796 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27797 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27798 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27799 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27800 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27801 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27802 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27803 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27804 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27805 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27806 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27807 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27808 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27809 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27810 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27811 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27812 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27813 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27814 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27815 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27816 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27817 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27818 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27819 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27820 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27821 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27822 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27823 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27824 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27825 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27826 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2EF224B||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 27827 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2EF3987||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 27828 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2EF22B1||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 27829 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2EF3AF4||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 27830 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2EF3987||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27831 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2EF3AF4| Linked Logon ID: 0x2EF3987| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27832 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2EF3987| Linked Logon ID: 0x2EF3AF4| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27833 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 27834 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 27835 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 27836 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 27837 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2EF224B||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27838 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2EF22B1| Linked Logon ID: 0x2EF224B| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27839 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2EF224B| Linked Logon ID: 0x2EF22B1| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27840 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 27841 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 27842 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 27843 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 27844 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27845 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27846 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27847 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27848 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27849 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27850 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27851 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27852 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27853 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27854 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27855 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27856 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27857 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27858 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27859 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27860 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27861 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27862 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27863 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27864 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27865 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27866 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27867 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27868 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27869 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27870 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27871 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27872 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27873 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27874 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27875 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27876 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27877 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27878 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27879 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27880 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27881 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27882 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27883 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27884 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27885 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27886 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27887 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27888 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27889 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27890 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27891 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27892 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27893 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27894 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27895 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27896 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27897 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27898 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27899 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27900 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27901 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27902 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27903 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27904 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27905 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27906 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27907 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 27908 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27909 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27910 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27911 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27912 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27913 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27914 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27915 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27916 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27917 | 2023-03-10 23:08:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27918 | 2023-03-10 23:06:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 27919 | 2023-03-10 23:06:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 27920 | 2023-03-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27921 | 2023-03-10 23:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27922 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27923 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27924 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27925 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27926 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27927 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27928 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27929 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27930 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27931 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27932 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27933 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27934 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27935 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27936 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27937 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27938 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27939 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27940 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27941 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27942 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27943 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27944 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27945 | 2023-03-10 23:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27946 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27947 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27948 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27949 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27950 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27951 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27952 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27953 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27954 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27955 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27956 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27957 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27958 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27959 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27960 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27961 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27962 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27963 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27964 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27965 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27966 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27967 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27968 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27969 | 2023-03-10 23:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27970 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27971 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27972 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27973 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27974 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27975 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27976 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27977 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27978 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27979 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27980 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27981 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27982 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27983 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27984 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27985 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27986 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27987 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27988 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27989 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27990 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27991 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27992 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27993 | 2023-03-10 23:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27994 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27995 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27996 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27997 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 27998 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 27999 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28000 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28001 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28002 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28003 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28004 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28005 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28006 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28007 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28008 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28009 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28010 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28011 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28012 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28013 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28014 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28015 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28016 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28017 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28018 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28019 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28020 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28021 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28022 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28023 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28024 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28025 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28026 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28027 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28028 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x2c3c| Process Name: C:\Windows\System32\LogonUI.exe |
| 28029 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28030 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28031 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28032 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28033 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28034 | 2023-03-10 23:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28035 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28036 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28037 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28038 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28039 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28040 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28041 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28042 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28043 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28044 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28045 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28046 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28047 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28048 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28049 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28050 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28051 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28052 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28053 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28054 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28055 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28056 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28057 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28058 | 2023-03-10 23:01:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28059 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28060 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28061 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28062 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28063 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28064 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28065 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28066 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28067 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28068 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28069 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28070 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28071 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28072 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28073 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28074 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28075 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28076 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28077 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28078 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28079 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28080 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28081 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28082 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28083 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28084 | 2023-03-10 23:00:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28085 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28086 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28087 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28088 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28089 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28090 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28091 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28092 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28093 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28094 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28095 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28096 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28097 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28098 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28099 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28100 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28101 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28102 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28103 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28104 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28105 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28106 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28107 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28108 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28109 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28110 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28111 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28112 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28113 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28114 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28115 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28116 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28117 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28118 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28119 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28120 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28121 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28122 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28123 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28124 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28125 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28126 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28127 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28128 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28129 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28130 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28131 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28132 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28133 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28134 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28135 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28136 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28137 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28138 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28139 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28140 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28141 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28142 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28143 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28144 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28145 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28146 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28147 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28148 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28149 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28150 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28151 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28152 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28153 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28154 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28155 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28156 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28157 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28158 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28159 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28160 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28161 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28162 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28163 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28164 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28165 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28166 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28167 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28168 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28169 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28170 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28171 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28172 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28173 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28174 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28175 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28176 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28177 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28178 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28179 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28180 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28181 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28182 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28183 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28184 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28185 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28186 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28187 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28188 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28189 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28190 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28191 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28192 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28193 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28194 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28195 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28196 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28197 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28198 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28199 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28200 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28201 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28202 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28203 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28204 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28205 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28206 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28207 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28208 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28209 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28210 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28211 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28212 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28213 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28214 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28215 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28216 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28217 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28218 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28219 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28220 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28221 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28222 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28223 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28224 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28225 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28226 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28227 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28228 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28229 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28230 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28231 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28232 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28233 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28234 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28235 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28236 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28237 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28238 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28239 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28240 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28241 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28242 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28243 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28244 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28245 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28246 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28247 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28248 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28249 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28250 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28251 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28252 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28253 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28254 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28255 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28256 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28257 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28258 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28259 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28260 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28261 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28262 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28263 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28264 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28265 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28266 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28267 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28268 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28269 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28270 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28271 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28272 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28273 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28274 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28275 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28276 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28277 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28278 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28279 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28280 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28281 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28282 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28283 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28284 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28285 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28286 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28287 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28288 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28289 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28290 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28291 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28292 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28293 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28294 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28295 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28296 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28297 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28298 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28299 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28300 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28301 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28302 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28303 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28304 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28305 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28306 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28307 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28308 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28309 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28310 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28311 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28312 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28313 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28314 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28315 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28316 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28317 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28318 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28319 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28320 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28321 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28322 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28323 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28324 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28325 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28326 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28327 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28328 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28329 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28330 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28331 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28332 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28333 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28334 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28335 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28336 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28337 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28338 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28339 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28340 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28341 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28342 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28343 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28344 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28345 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28346 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28347 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28348 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28349 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28350 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28351 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28352 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28353 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28354 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28355 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28356 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28357 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28358 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28359 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28360 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28361 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28362 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28363 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28364 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28365 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28366 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28367 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28368 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28369 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28370 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28371 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28372 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28373 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28374 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28375 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28376 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28377 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28378 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28379 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28380 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28381 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28382 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28383 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28384 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28385 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28386 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28387 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28388 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28389 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28390 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28391 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28392 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28393 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28394 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28395 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28396 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28397 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28398 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28399 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28400 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28401 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28402 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28403 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28404 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28405 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28406 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28407 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28408 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28409 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28410 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28411 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28412 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28413 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28414 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28415 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28416 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28417 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28418 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28419 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28420 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28421 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28422 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28423 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28424 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28425 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28426 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28427 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28428 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28429 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28430 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28431 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28432 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28433 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28434 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28435 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28436 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28437 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28438 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28439 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28440 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28441 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28442 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28443 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28444 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28445 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28446 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28447 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28448 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28449 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28450 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28451 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28452 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28453 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28454 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28455 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28456 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28457 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28458 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28459 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28460 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28461 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28462 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28463 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28464 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28465 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28466 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28467 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28468 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28469 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28470 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28471 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28472 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28473 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28474 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28475 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28476 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28477 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28478 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28479 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28480 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28481 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28482 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28483 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28484 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28485 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28486 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28487 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28488 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28489 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28490 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28491 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28492 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28493 | 2023-03-10 22:59:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28494 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28495 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28496 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28497 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28498 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x2c3c| Process Name: C:\Windows\System32\LogonUI.exe |
| 28499 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28500 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28501 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28502 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28503 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28504 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28505 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28506 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28507 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28508 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28509 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28510 | 2023-03-10 22:48:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28511 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28512 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28513 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28514 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28515 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28516 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28517 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28518 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28519 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28520 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28521 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28522 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28523 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28524 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28525 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28526 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28527 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28528 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28529 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28530 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28531 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28532 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28533 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28534 | 2023-03-10 22:47:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28535 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28536 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28537 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28538 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28539 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28540 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28541 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28542 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28543 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28544 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28545 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28546 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28547 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28548 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28549 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28550 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28551 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28552 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28553 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28554 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28555 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28556 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28557 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28558 | 2023-03-10 22:46:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28559 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28560 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28561 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28562 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28563 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28564 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28565 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28566 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28567 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28568 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28569 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28570 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28571 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28572 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28573 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28574 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28575 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28576 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28577 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28578 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28579 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28580 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28581 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28582 | 2023-03-10 22:45:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28583 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28584 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28585 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28586 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28587 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28588 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28589 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28590 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28591 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28592 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28593 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28594 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28595 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28596 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28597 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28598 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28599 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28600 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28601 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28602 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28603 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28604 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28605 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28606 | 2023-03-10 22:44:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28607 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28608 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28609 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28610 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28611 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28612 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28613 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28614 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28615 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28616 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28617 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28618 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28619 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28620 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28621 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28622 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28623 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28624 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28625 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28626 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28627 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28628 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28629 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28630 | 2023-03-10 22:43:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28631 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28632 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28633 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28634 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28635 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28636 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28637 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28638 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28639 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28640 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28641 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28642 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28643 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28644 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28645 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28646 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28647 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28648 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28649 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28650 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28651 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28652 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28653 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28654 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28655 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28656 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28657 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28658 | 2023-03-10 22:42:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28659 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28660 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28661 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28662 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28663 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28664 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28665 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28666 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28667 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28668 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28669 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28670 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28671 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28672 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28673 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28674 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28675 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28676 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28677 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28678 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28679 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28680 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28681 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28682 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28683 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28684 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28685 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28686 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28687 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28688 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28689 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28690 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28691 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28692 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28693 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28694 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28695 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28696 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28697 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28698 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28699 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28700 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28701 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28702 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28703 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28704 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28705 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28706 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28707 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28708 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28709 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28710 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28711 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28712 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28713 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28714 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28715 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28716 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28717 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28718 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28719 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28720 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28721 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28722 | 2023-03-10 22:41:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28723 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28724 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28725 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28726 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28727 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28728 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28729 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28730 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28731 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28732 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28733 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28734 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28735 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28736 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28737 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28738 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28739 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28740 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28741 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28742 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28743 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28744 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28745 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28746 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28747 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28748 | 2023-03-10 22:40:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28749 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28750 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28751 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28752 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28753 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28754 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28755 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28756 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28757 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28758 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28759 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28760 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28761 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28762 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28763 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28764 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28765 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28766 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28767 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28768 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28769 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28770 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28771 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28772 | 2023-03-10 22:39:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28773 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28774 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28775 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28776 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28777 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28778 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28779 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28780 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28781 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28782 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28783 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28784 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28785 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28786 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28787 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28788 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28789 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28790 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28791 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28792 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28793 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28794 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28795 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28796 | 2023-03-10 22:38:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28797 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28798 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28799 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28800 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28801 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28802 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28803 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28804 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28805 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28806 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28807 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28808 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28809 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28810 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28811 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28812 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28813 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28814 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28815 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28816 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28817 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28818 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28819 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28820 | 2023-03-10 22:37:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28821 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28822 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28823 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28824 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28825 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28826 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28827 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28828 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28829 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28830 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28831 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28832 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28833 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28834 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28835 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28836 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28837 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28838 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28839 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28840 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28841 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28842 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28843 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28844 | 2023-03-10 22:36:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28845 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28846 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28847 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28848 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28849 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28850 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28851 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28852 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28853 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28854 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28855 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28856 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28857 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28858 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28859 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28860 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28861 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28862 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28863 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28864 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28865 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28866 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28867 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28868 | 2023-03-10 22:35:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28869 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28870 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28871 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28872 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28873 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28874 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28875 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28876 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28877 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28878 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28879 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28880 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28881 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28882 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28883 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28884 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28885 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28886 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28887 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28888 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28889 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28890 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28891 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28892 | 2023-03-10 22:34:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28893 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28894 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28895 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28896 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28897 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28898 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28899 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28900 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28901 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28902 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28903 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28904 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28905 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28906 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28907 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28908 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28909 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28910 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28911 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28912 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28913 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28914 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28915 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28916 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28917 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28918 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28919 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28920 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28921 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 28922 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 28923 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 28924 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28925 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28926 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28927 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28928 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28929 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28930 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28931 | 2023-03-10 22:33:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28932 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28933 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28934 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28935 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28936 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28937 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28938 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28939 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28940 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28941 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28942 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28943 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28944 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28945 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28946 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28947 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28948 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28949 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28950 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28951 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28952 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28953 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28954 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28955 | 2023-03-10 22:32:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28956 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28957 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28958 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28959 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28960 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28961 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28962 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28963 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28964 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28965 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28966 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28967 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28968 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28969 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28970 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28971 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28972 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28973 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28974 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28975 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28976 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28977 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28978 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28979 | 2023-03-10 22:31:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28980 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28981 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28982 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28983 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28984 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28985 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28986 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28987 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28988 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28989 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28990 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28991 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28992 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28993 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28994 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28995 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28996 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28997 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 28998 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 28999 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29000 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29001 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29002 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29003 | 2023-03-10 22:30:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29004 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29005 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29006 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29007 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29008 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29009 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29010 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29011 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29012 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29013 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29014 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29015 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29016 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29017 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29018 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29019 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29020 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29021 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29022 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29023 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29024 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29025 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29026 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29027 | 2023-03-10 22:29:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29028 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29029 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29030 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29031 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29032 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29033 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29034 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29035 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29036 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29037 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29038 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29039 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29040 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29041 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29042 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29043 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29044 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29045 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29046 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29047 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29048 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29049 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29050 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29051 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29052 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29053 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29054 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29055 | 2023-03-10 22:28:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29056 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29057 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29058 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29059 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29060 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29061 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29062 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29063 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29064 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29065 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29066 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29067 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29068 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29069 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29070 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29071 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29072 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29073 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29074 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29075 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29076 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29077 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29078 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29079 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29080 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29081 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29082 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29083 | 2023-03-10 22:27:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29084 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29085 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29086 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29087 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29088 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29089 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29090 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29091 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29092 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29093 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29094 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29095 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29096 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29097 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29098 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29099 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29100 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29101 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29102 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29103 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29104 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29105 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29106 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29107 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29108 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29109 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29110 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29111 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29112 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29113 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29114 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29115 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29116 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29117 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29118 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29119 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29120 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29121 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29122 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29123 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29124 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29125 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29126 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 29127 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 29128 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29129 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29130 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29131 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29132 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29133 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29134 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29135 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29136 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29137 | 2023-03-10 22:26:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29138 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29139 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29140 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29141 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29142 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29143 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29144 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29145 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29146 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29147 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29148 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29149 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29150 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29151 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29152 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29153 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29154 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29155 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29156 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29157 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29158 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29159 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29160 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29161 | 2023-03-10 22:25:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29162 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29163 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29164 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29165 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29166 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29167 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29168 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29169 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29170 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29171 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29172 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29173 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29174 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 29175 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29176 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29177 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29178 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29179 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29180 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29181 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 29182 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 29183 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29184 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29185 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29186 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29187 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29188 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29189 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29190 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29191 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29192 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29193 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29194 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29195 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29196 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29197 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29198 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29199 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29200 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29201 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29202 | 2023-03-10 22:24:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29203 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29204 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29205 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29206 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29207 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29208 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29209 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29210 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29211 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29212 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29213 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29214 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29215 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29216 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29217 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29218 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29219 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29220 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29221 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29222 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29223 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29224 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29225 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29226 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29227 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29228 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29229 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29230 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29231 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29232 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29233 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29234 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29235 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29236 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29237 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29238 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29239 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29240 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29241 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29242 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29243 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29244 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29245 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29246 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29247 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29248 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29249 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29250 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29251 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29252 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29253 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29254 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29255 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29256 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29257 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29258 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29259 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29260 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29261 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29262 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29263 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29264 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29265 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29266 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29267 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29268 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29269 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29270 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29271 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29272 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29273 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29274 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29275 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29276 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29277 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29278 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29279 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29280 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29281 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29282 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29283 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29284 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29285 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29286 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29287 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29288 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29289 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29290 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29291 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29292 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29293 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29294 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29295 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29296 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29297 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29298 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29299 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29300 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29301 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29302 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29303 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29304 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29305 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29306 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29307 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29308 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29309 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29310 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29311 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29312 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29313 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29314 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29315 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29316 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29317 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29318 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29319 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29320 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29321 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29322 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29323 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29324 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29325 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29326 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29327 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29328 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29329 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29330 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29331 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29332 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29333 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29334 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29335 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 29336 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 29337 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29338 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29339 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29340 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29341 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29342 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29343 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29344 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29345 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29346 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29347 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29348 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29349 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29350 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29351 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29352 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29353 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29354 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29355 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29356 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29357 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29358 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29359 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29360 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29361 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29362 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29363 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29364 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29365 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29366 | 2023-03-10 22:23:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29367 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29368 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29369 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29370 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29371 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29372 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29373 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29374 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29375 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29376 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29377 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29378 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29379 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29380 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29381 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29382 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29383 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29384 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29385 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29386 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29387 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29388 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29389 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29390 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29391 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29392 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29393 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29394 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29395 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29396 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29397 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29398 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29399 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29400 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29401 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29402 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29403 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29404 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29405 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29406 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29407 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29408 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29409 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29410 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29411 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29412 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29413 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29414 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29415 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29416 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29417 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29418 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29419 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29420 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29421 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29422 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29423 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29424 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29425 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29426 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29427 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29428 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29429 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29430 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29431 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29432 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29433 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29434 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29435 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29436 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29437 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29438 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29439 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29440 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29441 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29442 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29443 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29444 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29445 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29446 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29447 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29448 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29449 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29450 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29451 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29452 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29453 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29454 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29455 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29456 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29457 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29458 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29459 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29460 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29461 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29462 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29463 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29464 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29465 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29466 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29467 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29468 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29469 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29470 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29471 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29472 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29473 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29474 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29475 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29476 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29477 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29478 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29479 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29480 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29481 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29482 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29483 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29484 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29485 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29486 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29487 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29488 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29489 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29490 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29491 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29492 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29493 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29494 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29495 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29496 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29497 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29498 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29499 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29500 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29501 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29502 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29503 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29504 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29505 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29506 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29507 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29508 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29509 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29510 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29511 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29512 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29513 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29514 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29515 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29516 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29517 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29518 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29519 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29520 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29521 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29522 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29523 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29524 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29525 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29526 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29527 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29528 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29529 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29530 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29531 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29532 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29533 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29534 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29535 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29536 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29537 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29538 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29539 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29540 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29541 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29542 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29543 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29544 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29545 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29546 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29547 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29548 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29549 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29550 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29551 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29552 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29553 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29554 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29555 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29556 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29557 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29558 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29559 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29560 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29561 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29562 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29563 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29564 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29565 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29566 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29567 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29568 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29569 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29570 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29571 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29572 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29573 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29574 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29575 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29576 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29577 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29578 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29579 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2B720C5||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 29580 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2B7018F||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 29581 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2B70208||Logon Type: 2||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 29582 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4634 | Logoff | An account was logged off.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0x2B72247||Logon Type: 7||This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer. |
| 29583 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2B720C5||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 29584 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2B72247| Linked Logon ID: 0x2B720C5| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 29585 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 7| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2B720C5| Linked Logon ID: 0x2B72247| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Negotiat| Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 29586 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0x378| Process Name: C:\Windows\System32\lsass.exe||Network Information:| Network Address: -| Port: -||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 29587 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 29588 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 29589 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 29590 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2B7018F||Privileges: SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 29591 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: No||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2B70208| Linked Logon ID: 0x2B7018F| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 29592 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 11| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon ID: 0x2B7018F| Linked Logon ID: 0x2B70208| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Workstation Name: DESKTOP-L9NRCO2| Source Network Address: 127.0.0.1| Source Port: 0||Detailed Authentication Information:| Logon Process: User32 | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 29593 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4648 | Logon | A logon was attempted using explicit credentials.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Logon GUID: {00000000-0000-0000-0000-000000000000}||Account Whose Credentials Were Used:| Account Name: prashant.badadhe| Account Domain: MicrosoftAccount| Logon GUID: {00000000-0000-0000-0000-000000000000}||Target Server:| Target Server Name: localhost| Additional Information: localhost||Process Information:| Process ID: 0xd50| Process Name: C:\Windows\System32\svchost.exe||Network Information:| Network Address: 127.0.0.1| Port: 0||This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command. |
| 29594 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4738 | User Account Management | A user account was changed.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Target Account:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Changed Attributes:| SAM Account Name: -| Display Name: Prashant Badadhe| User Principal Name: -| Home Directory: -| Home Drive: -| Script Path: -| Profile Path: -| User Workstations: -| Password Last Set: -| Account Expires: -| Primary Group ID: -| AllowedToDelegateTo: -| Old UAC Value: -| New UAC Value: -| User Account Control: -| User Parameters: -| SID History: -| Logon Hours: -||Additional Information:| Privileges: - |
| 29595 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 29596 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5059 | Other System Events | Key migration operation.||Subject:| Security ID: LOCAL SERVICE| Account Name: LOCAL SERVICE| Account Domain: NT AUTHORITY| Logon ID: 0x3E5||Process Information:| Process ID: 10312| Process Creation Time: 2023-10-02T21:55:55.262728500Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: {4FFB625F-E2B5-4AFB-8576-2E8824433276}| Key Type: User key.||Additional Information:| Operation: Export of persistent cryptographic key.| Return Code: 0x0 |
| 29597 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29598 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29599 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29600 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29601 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29602 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29603 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29604 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29605 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29606 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29607 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29608 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29609 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29610 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29611 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29612 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29613 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29614 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29615 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29616 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29617 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29618 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29619 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29620 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29621 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29622 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29623 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29624 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29625 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29626 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29627 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29628 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29629 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29630 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29631 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29632 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29633 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29634 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29635 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29636 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29637 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29638 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29639 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29640 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29641 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29642 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29643 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29644 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29645 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29646 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29647 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29648 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29649 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29650 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29651 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29652 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29653 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29654 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29655 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29656 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29657 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29658 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29659 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29660 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29661 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29662 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29663 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29664 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29665 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29666 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29667 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29668 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29669 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29670 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29671 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29672 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29673 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29674 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29675 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29676 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29677 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29678 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29679 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29680 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29681 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29682 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29683 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29684 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29685 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29686 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29687 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29688 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29689 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29690 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29691 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29692 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29693 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29694 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29695 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29696 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29697 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29698 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29699 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29700 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29701 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29702 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29703 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29704 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29705 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29706 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29707 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29708 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29709 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29710 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29711 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29712 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29713 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29714 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29715 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29716 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29717 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29718 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29719 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29720 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29721 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29722 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29723 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29724 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29725 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29726 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29727 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29728 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29729 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29730 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29731 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29732 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29733 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29734 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29735 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29736 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29737 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29738 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29739 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29740 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29741 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29742 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29743 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29744 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29745 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29746 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29747 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29748 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29749 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29750 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29751 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29752 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29753 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29754 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29755 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29756 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29757 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29758 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29759 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29760 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29761 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29762 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29763 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29764 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29765 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29766 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29767 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29768 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29769 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29770 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29771 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29772 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29773 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29774 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29775 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29776 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29777 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29778 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29779 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29780 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29781 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29782 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29783 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29784 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29785 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29786 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29787 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29788 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29789 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29790 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29791 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29792 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29793 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29794 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29795 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29796 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29797 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29798 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29799 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29800 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29801 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29802 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29803 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29804 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29805 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29806 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29807 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29808 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29809 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29810 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29811 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29812 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29813 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29814 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29815 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29816 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29817 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29818 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29819 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29820 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29821 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29822 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29823 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29824 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29825 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29826 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29827 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29828 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29829 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29830 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29831 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29832 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29833 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29834 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29835 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29836 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29837 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29838 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29839 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29840 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29841 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29842 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29843 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29844 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29845 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29846 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29847 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29848 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29849 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29850 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29851 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29852 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29853 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29854 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29855 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29856 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29857 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29858 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29859 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29860 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29861 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29862 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29863 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29864 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29865 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29866 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29867 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29868 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29869 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29870 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29871 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29872 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29873 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29874 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29875 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29876 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29877 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29878 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29879 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29880 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29881 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29882 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29883 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29884 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29885 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29886 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29887 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29888 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29889 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29890 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29891 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29892 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29893 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29894 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29895 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29896 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29897 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29898 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29899 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29900 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29901 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29902 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29903 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29904 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29905 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29906 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29907 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29908 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29909 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29910 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29911 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29912 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29913 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29914 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29915 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29916 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29917 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29918 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29919 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 29920 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 29921 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 29922 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 29923 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29924 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29925 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29926 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29927 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29928 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29929 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29930 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29931 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29932 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29933 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29934 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29935 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29936 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29937 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29938 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29939 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29940 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29941 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 29942 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 29943 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29944 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29945 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29946 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29947 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29948 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29949 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29950 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29951 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29952 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29953 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29954 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29955 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29956 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29957 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29958 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29959 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29960 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29961 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29962 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29963 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29964 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29965 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29966 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29967 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29968 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29969 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29970 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29971 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29972 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29973 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29974 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29975 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29976 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29977 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29978 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29979 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29980 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29981 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29982 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29983 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29984 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29985 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29986 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29987 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29988 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29989 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29990 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29991 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29992 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29993 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29994 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29995 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29996 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29997 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29998 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 29999 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30000 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30001 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30002 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30003 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30004 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30005 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30006 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30007 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30008 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30009 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30010 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30011 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30012 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30013 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30014 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30015 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30016 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30017 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x5780| Process Name: C:\Windows\System32\taskhostw.exe |
| 30018 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30019 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_office.net| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30020 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30021 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30022 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30023 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30024 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30025 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30026 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30027 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30028 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30029 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30030 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30031 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30032 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30033 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30034 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30035 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30036 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30037 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30038 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30039 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30040 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30041 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30042 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30043 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30044 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30045 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30046 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30047 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30048 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30049 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30050 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30051 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30052 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30053 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30054 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30055 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30056 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30057 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30058 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30059 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30060 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30061 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30062 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30063 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30064 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30065 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30066 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30067 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30068 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30069 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30070 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30071 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30072 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30073 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30074 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x4254| Process Name: C:\Windows\System32\LogonUI.exe |
| 30075 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30076 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30077 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30078 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30079 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30080 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30081 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30082 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30083 | 2023-03-10 22:22:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30084 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30085 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30086 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30087 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30088 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30089 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30090 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30091 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30092 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30093 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30094 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30095 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30096 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30097 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30098 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Guest| Account Name: Guest| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30099 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\DefaultAccount| Account Name: DefaultAccount| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30100 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\Administrator| Account Name: Administrator| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x69a0| Process Name: C:\Windows\System32\taskhostw.exe |
| 30101 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30102 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30103 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30104 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30105 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30106 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30107 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30108 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30109 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30110 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30111 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30112 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30113 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30114 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30115 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30116 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30117 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30118 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30119 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30120 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30121 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30122 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30123 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30124 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30125 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30126 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30127 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30128 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30129 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30130 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30131 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30132 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30133 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30134 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30135 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30136 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30137 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30138 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30139 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30140 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30141 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30142 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30143 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30144 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30145 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30146 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30147 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30148 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30149 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30150 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30151 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30152 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30153 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30154 | 2023-03-10 19:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30155 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30156 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30157 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30158 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30159 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30160 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30161 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 4798 | User Account Management | A user's local group membership was enumerated.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||User:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2||Process Information:| Process ID: 0x4254| Process Name: C:\Windows\System32\LogonUI.exe |
| 30162 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30163 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30164 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30165 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30166 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30167 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30168 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30169 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30170 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30171 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30172 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30173 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30174 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30175 | 2023-03-10 15:18:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30176 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30177 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30178 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30179 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30180 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30181 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30182 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30183 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30184 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30185 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30186 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30187 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30188 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30189 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30190 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30191 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30192 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30193 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30194 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30195 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30196 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30197 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30198 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30199 | 2023-03-10 15:17:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30200 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30201 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30202 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30203 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30204 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30205 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30206 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30207 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30208 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30209 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30210 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30211 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30212 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30213 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30214 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30215 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30216 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30217 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30218 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30219 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30220 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30221 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30222 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30223 | 2023-03-10 15:16:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30224 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30225 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30226 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30227 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30228 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30229 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30230 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30231 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30232 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30233 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30234 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30235 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30236 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30237 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30238 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30239 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30240 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30241 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30242 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30243 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30244 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30245 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30246 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30247 | 2023-03-10 15:15:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30248 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30249 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30250 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30251 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30252 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30253 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30254 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30255 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30256 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30257 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30258 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30259 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30260 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30261 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30262 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30263 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30264 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30265 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30266 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30267 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30268 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30269 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30270 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30271 | 2023-03-10 15:14:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30272 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30273 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30274 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30275 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30276 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30277 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30278 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30279 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30280 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30281 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30282 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30283 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30284 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30285 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30286 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30287 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30288 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30289 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30290 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30291 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30292 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30293 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30294 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30295 | 2023-03-10 15:13:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30296 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30297 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30298 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30299 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30300 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30301 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30302 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30303 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30304 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30305 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30306 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30307 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30308 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30309 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30310 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30311 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30312 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30313 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30314 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30315 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30316 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30317 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30318 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30319 | 2023-03-10 15:12:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30320 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30321 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30322 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30323 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30324 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30325 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30326 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30327 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30328 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30329 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30330 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30331 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30332 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30333 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30334 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30335 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30336 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30337 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30338 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30339 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30340 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30341 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30342 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30343 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30344 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30345 | 2023-03-10 15:11:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30346 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30347 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30348 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30349 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30350 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30351 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30352 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30353 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30354 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30355 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30356 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30357 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30358 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30359 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30360 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30361 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30362 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30363 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30364 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30365 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30366 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30367 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30368 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30369 | 2023-03-10 15:10:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30370 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30371 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30372 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30373 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30374 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30375 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30376 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30377 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30378 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30379 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30380 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30381 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30382 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30383 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30384 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30385 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30386 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30387 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30388 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30389 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30390 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30391 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30392 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30393 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30394 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30395 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30396 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30397 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30398 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30399 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30400 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30401 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30402 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30403 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30404 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30405 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30406 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30407 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30408 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30409 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30410 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30411 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 4672 | Special Logon | Special privileges assigned to new logon.||Subject:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7||Privileges: SeAssignPrimaryTokenPrivilege| SeTcbPrivilege| SeSecurityPrivilege| SeTakeOwnershipPrivilege| SeLoadDriverPrivilege| SeBackupPrivilege| SeRestorePrivilege| SeDebugPrivilege| SeAuditPrivilege| SeSystemEnvironmentPrivilege| SeImpersonatePrivilege| SeDelegateSessionUserImpersonatePrivilege |
| 30412 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 4624 | Logon | An account was successfully logged on.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||Logon Information:| Logon Type: 5| Restricted Admin Mode: -| Virtual Account: No| Elevated Token: Yes||Impersonation Level: Impersonation||New Logon:| Security ID: SYSTEM| Account Name: SYSTEM| Account Domain: NT AUTHORITY| Logon ID: 0x3E7| Linked Logon ID: 0x0| Network Account Name: -| Network Account Domain: -| Logon GUID: {00000000-0000-0000-0000-000000000000}||Process Information:| Process ID: 0x360| Process Name: C:\Windows\System32\services.exe||Network Information:| Workstation Name: -| Source Network Address: -| Source Port: -||Detailed Authentication Information:| Logon Process: Advapi | Authentication Package: Negotiate| Transited Services: -| Package Name (NTLM only): -| Key Length: 0||This event is generated when a logon session is created. It is generated on the computer that was accessed.||The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.||The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).||The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.||The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.||The impersonation level field indicates the extent to which a process in the logon session can impersonate.||The authentication information fields provide detailed information about this specific logon request.| - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.| - Transited services indicate which intermediate services have participated in this logon request.| - Package name indicates which sub-protocol was used among the NTLM protocols.| - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. |
| 30413 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30414 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30415 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30416 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30417 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30418 | 2023-03-10 15:09:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30419 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30420 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30421 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30422 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30423 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30424 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30425 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30426 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30427 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30428 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30429 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30430 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30431 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30432 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30433 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30434 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30435 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30436 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30437 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30438 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30439 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30440 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30441 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30442 | 2023-03-10 15:08:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30443 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30444 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30445 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30446 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30447 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30448 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30449 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30450 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30451 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30452 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30453 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30454 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30455 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30456 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30457 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30458 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30459 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30460 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30461 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30462 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30463 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30464 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30465 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30466 | 2023-03-10 15:07:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30467 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30468 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30469 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30470 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30471 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30472 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30473 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30474 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30475 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30476 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30477 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30478 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30479 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30480 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30481 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30482 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30483 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30484 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30485 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30486 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30487 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30488 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30489 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30490 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30491 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30492 | 2023-03-10 15:06:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30493 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30494 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30495 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30496 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30497 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30498 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30499 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30500 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30501 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30502 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30503 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30504 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30505 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30506 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30507 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30508 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30509 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30510 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30511 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30512 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30513 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30514 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30515 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30516 | 2023-03-10 15:05:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30517 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30518 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30519 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30520 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30521 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30522 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30523 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30524 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30525 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30526 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30527 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30528 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30529 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30530 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30531 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30532 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30533 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30534 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30535 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30536 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30537 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30538 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30539 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30540 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30541 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30542 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30543 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30544 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30545 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30546 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30547 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30548 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30549 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30550 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30551 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30552 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30553 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30554 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30555 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30556 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30557 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30558 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30559 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30560 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30561 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30562 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30563 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30564 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30565 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30566 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30567 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30568 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30569 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30570 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30571 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30572 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30573 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30574 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30575 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30576 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30577 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30578 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30579 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30580 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30581 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30582 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30583 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30584 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30585 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30586 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30587 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30588 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30589 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30590 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30591 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30592 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30593 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30594 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30595 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30596 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30597 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30598 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30599 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30600 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30601 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30602 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30603 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30604 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30605 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30606 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30607 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30608 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30609 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30610 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30611 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30612 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30613 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30614 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30615 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30616 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30617 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30618 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30619 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30620 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30621 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30622 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30623 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30624 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30625 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30626 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30627 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30628 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30629 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30630 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30631 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30632 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30633 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30634 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30635 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30636 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30637 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30638 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30639 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30640 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30641 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30642 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30643 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30644 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30645 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30646 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30647 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30648 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30649 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30650 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30651 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30652 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30653 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30654 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30655 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30656 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30657 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30658 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30659 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30660 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30661 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30662 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30663 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30664 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30665 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30666 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30667 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30668 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30669 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30670 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30671 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30672 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30673 | 2023-03-10 15:04:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30674 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30675 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30676 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30677 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30678 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30679 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30680 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30681 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30682 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30683 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30684 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30685 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30686 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30687 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30688 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30689 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30690 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30691 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30692 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30693 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30694 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30695 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30696 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5382 | User Account Management | Vault credentials were read.||Subject:| Security ID: SYSTEM| Account Name: DESKTOP-L9NRCO2$| Account Domain: WORKGROUP| Logon ID: 0x3E7||This event occurs when a user reads a stored vault credential. |
| 30697 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30698 | 2023-03-10 15:03:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30699 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30700 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30701 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30702 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30703 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30704 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30705 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30706 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30707 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30708 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30709 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30710 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30711 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30712 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30713 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30714 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30715 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30716 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30717 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30718 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30719 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30720 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30721 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30722 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30723 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30724 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30725 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30726 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30727 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30728 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30729 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30730 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30731 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30732 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30733 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30734 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30735 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30736 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30737 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30738 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30739 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30740 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30741 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30742 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30743 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30744 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30745 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30746 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30747 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30748 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30749 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30750 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30751 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30752 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30753 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30754 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30755 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30756 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30757 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30758 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30759 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30760 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30761 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30762 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30763 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30764 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30765 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30766 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30767 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30768 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30769 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30770 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30771 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30772 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30773 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30774 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30775 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30776 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30777 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30778 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30779 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30780 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30781 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30782 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30783 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30784 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30785 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30786 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30787 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30788 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30789 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30790 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30791 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30792 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30793 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30794 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30795 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30796 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30797 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30798 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30799 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30800 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30801 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30802 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30803 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30804 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30805 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30806 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30807 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30808 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30809 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30810 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30811 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30812 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30813 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30814 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30815 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30816 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30817 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30818 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30819 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30820 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30821 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30822 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30823 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30824 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30825 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30826 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30827 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30828 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30829 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: RSA| Key Name: TB_0_microsoft.com| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30830 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30831 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30832 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30833 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30834 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30835 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30836 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30837 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30838 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30839 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30840 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30841 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30842 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30843 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30844 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30845 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30846 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30847 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30848 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30849 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30850 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30851 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30852 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30853 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30854 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30855 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30856 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30857 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30858 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30859 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30860 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30861 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30862 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30863 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30864 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Read Credential||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30865 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30866 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30867 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30868 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30869 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30870 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30871 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30872 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30873 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30874 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30875 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30876 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30877 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30878 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30879 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30880 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30881 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30882 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30883 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30884 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30885 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30886 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30887 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30888 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30889 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30890 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30891 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30892 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30893 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5061 | System Integrity | Cryptographic operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: AES| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Cryptographic Operation:| Operation: Open Key.| Return Code: 0x0 |
| 30894 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5058 | Other System Events | Key file operation.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B||Process Information:| Process ID: 17600| Process Creation Time: 2023-10-02T21:56:27.394232600Z||Cryptographic Parameters:| Provider Name: Microsoft Software Key Storage Provider| Algorithm Name: UNKNOWN| Key Name: Key2WrapEncryptionKey| Key Type: User key.||Key File Operation Information:| File Path: C:\Users\prash\AppData\Roaming\Microsoft\Crypto\Keys\e84a0c1ba3ac1fd825e56d898e3e81f8_9dc41865-e958-4a52-ae28-5b33ea299b46| Operation: Read persisted key from file.| Return Code: 0x0 |
| 30895 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30896 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30897 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30898 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30899 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30900 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30901 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30902 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30903 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30904 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30905 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30906 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30907 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30908 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30909 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30910 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30911 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30912 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30913 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30914 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30915 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30916 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30917 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30918 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30919 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |
| 30920 | 2023-03-10 15:02:00 | Microsoft-Windows-Security-Auditing | 5379 | User Account Management | Credential Manager credentials were read.||Subject:| Security ID: DESKTOP-L9NRCO2\prash| Account Name: prash| Account Domain: DESKTOP-L9NRCO2| Logon ID: 0xCCC8B| Read Operation: Enumerate Credentials||This event occurs when a user performs a read operation on stored credentials in Credential Manager. |